Introduction to Third Party Risk Management

In this short video, Ms. Harshita Poddar, GRC Expert, will discuss what is Third Party Risk Management.Third party risk management is a vital part of any business. Third party risk assessment is a process used to identify and mitigate risks posed by third parties to a company. By understanding the risks posed by third parties, companies can make informed decisions about how to manage those risks. She providing overview of third party risk assessment, explaining how it works and what risks it covers.his video will help you understand how third party risk assessment works and help you understand the benefits of using it in your business.
Harshita Profile
/ harshita-poddar
Part 2 by Kavitha
• Uncover the Secrets of...
Part 1 Introduction to Governance
• GRC Practical Approach...
Part 2 Governance
• GRC Practical Approach...
Part 3 How to Build Enterprise Risk Assessment in an organization
• "Unlock the Secret to ...
How to Build PIMS
• How to Implement Priva...
How to Implement 27001 in an organization
• Implementing ISO 27001...
How to conduct PIA
• How to Conduct Privacy...
How to Make an career in GRC
• Learn How to Make an A...
Telegram Group
t.me/Prabhstudy
Start your career in cybersecurity with free resources
Cybersecurity Career: How to Make a Career in Cybersecurity 2022 lnkd.in/gCGBnRM7
Pentesting Career
lnkd.in/gQYenKYd
GRC Interview Questions
• GRC
Pentesting Interview Questions
• Pentesting
Network Security Interview
• Network Security
Telegram Group Link
t.me/Prabhstudy
Cybersecurity Guide
• Cybersecurity Guide
SOC Interview Questions
• SOC Analyst Introducti...
Follow me on Instagram
prabhnair?...
#thirdparty #thirdpartyassessment #infosec #cybersecurity #infosec #dataprivacy #vendorriskassessment
How to Conduct vendor risk assessment in an organization

[@user-vm7dp4yg7g]

Finally I got a clear vision now to switch from Non IT (Mechanical) to Security management ❤... Thanks a lot entire team....

[@finvestingjourney]

To the point explanation about the process. Another key area Harshita could have included was about Effective Stakeholder Communication In this process where in the first case you are meeting with the stakeholders to understand use case of third-party that business line is seeking to procure and secondly in certain circumstances you might have to engage third party over a discussion where there is no clarity about controls they have explained or any gaps you have observed. Let’s say vulnerability and patch management, business continuity exercise and sometimes management hasn’t included any statement about treatment plan for exceptions noted in audit reports. I completely agree that this is huge and ongoing process which cannot be explained in a specified time frame and lastly it varies upon use case with different considerations so hats off..

[@shupragya]

Explaining difficult things in an easy way is an art. Love the content and thanks for your efforts.

[@SalamaAltalla]

Thanks very much Prabh & Harshita, Great Content.

[@chiomaaniagba6437]

I couldn't express my gratitude enough for all you do for free here! Your teachings have really helped me a great deal! Thanks to Harshita as well, she did an awesome job explaining most of the processes! I truly appreciate both of you and may God continually protect and uphold you all. Thanks for improving on the audio sound as well! Looking forward to the vendor risk assessment. ❤

[@hmontazir]

Great session 👏 the validation part was interesting, and I would love to hear more about it.

[@francisfrancis1153]

Thanks Prab. I should be taking notes while listening to your videos. Your videos are valuable.

[@spmanoj123]

Great thanks Prabh and Harshita for this wondefful session of TPRM.

[@user-uu2zi5ug2y]

This is really helpful. I have a background in risk management and really enjoyed the content.

[@rupeshwai]

Thank you Prab and Harshita 👍

[@usoni30]

Thank you for the detailed session, super helpful.

[@rifassiraji7993]

Great Content Prabh...You are the real eye-opener.

[@SantoshSharma]

appreciate for sharing good content👏🏻

[@anilvannela3092]

Very clearly explained. Thq

[@shaikmohiuddin1288]

Great information 👍 we need more series on TPRM.

[@jainraj5263]

Excellent session 🙏

[@nidhigandha-lp8df]

Thank you for the knowledge session.. its a great learning and hope to see other videos on GRC

[@nidhigandha-lp8df]

@Prabh , I had one question, how can we identify if the ISO cert is fake ?

[@kashishhinduja4515]

Great Content. Keep it up!!

[@Arts_Scope]

hi great content pls whats the website she talked about in updating ones knowlegde in GRC,couldnt get the spelling?

[@chaitnyathoorpu8102]

Many thanks to Prabh and Harshitha..These days I always wait for your new upcoming videos and I also write down the notes on the topics u discuss ,as am planning to shift my career.Would like to know how the security and privacy questionarre looks like in real time. Please conduct a mock inetrviews on GRC,GDPR,CYBER ESSENTIALS AND PLUS,THREAT MODELLING ,stride.

[@sajeedadihyat]

😊thank you very much

[@mudmalhanumantharao5438]

Excellent

[@govardhana9817]

Liked the spider man context😊

[@williamafriyie5688]

Awesome 👏🏽 I

[@watchingisfun1835]

Regarding ISO issuance, who is responsible? It is the Certificate issuers like Deloitte, BSI etc. I am seeing that companies, got the certificate never renew its and uses the same to lure the customers after expiration. I am not sure why issuers doesn't maintain the records for certificate issuance like issuance and expiry date and re-ask to do so. And if companies fails and again using the same certificate for business purpose. Legal action can be taken.

[@qaiserqadri]

What are the KPIs that need to be considered

[@fonwalter3270]

Please what is the website for keping up todate that the presenter shared by Harshita?

[@MarkAkram]

"If Prabh can do it, then anyone else can do it" I disagree with her. Prabh is on another level, Praph is consistent and passionate about all security topics. Prabh is the encyclopedia of Information security. Praph is an inspiration to the security field and the community overall.

[@fossdom5568]

A quick feedback - I did watch most of your interviews, you seem to interrupt the guest a lot of times , not good , no doubt the content is good but if you go back and look host spoke more than the guest . Let the guest speak !

[@PrabhNair1]

Thanks for the feedback:) I just wanted to make sure content to remain engaged:) .I do respect my speaker and I will try to improve this :)

[@ERamya-qt9jd]

Sorry to say that I disagree with this comment as I see most of the questions prabh was asking are in most of our minds... He is driving the speaker in a more productive way so that we can apply that to real time scenarios.. Bookish knowledge we will get from anywhere. But understanding the real application is something we need to appreciate which most of the videos don't provide... I really like this session....