GDPR and Vendor Risk Management
As the GDPR enforcement date edges closer, organizations remain unprepared to comply, especially when it comes to vendor risk management.
What — beyond contracts — do organizations need? While many components of GDPR can prove challenging to organizations, the ones that are most onerous as the ones that relate to third-party vendors.
In an interview about GDPR compliance, BitSight’s General Counsel, Elizabeth Fischer discusses:
- Why organizations remain unprepared for GDPR;
- What is most misunderstood about vendor risk management;
- The value of vendor cybersecurity ratings and continuous monitoring.
