Risk you inherit.
WHAT IT MEANS
A compromise reaching you through something you use or someone you work with.
WHERE IT COMES FROM
Software you install Services holding your data Suppliers and contractors with access Plugins and extensions
WHAT TO ASSESS
What each third party can access What happens if they are compromised Whether you could continue without them
WHAT TO DO
Give each the minimum access necessary Remove access no longer needed Review what is connected, periodically
THE FORGOTTEN CONNECTION PROBLEM
Services authorised years ago still holding access.
Review and revoke.
WHAT TO ASK OF A SUPPLIER HOLDING YOUR DATA
How it is protected What happens if they are breached How you get your data back
WHAT TO AVOID
Installing software from unknown sources Granting broad access for convenience
WHAT TO KEEP
A list of every service with access to your systems or data.
