Cybersecurity and Third-Party Risk

Index

• Able Desktop, 3, 405
• ABS, 21
• Accenture, 110
• Acceptable Use Policy, for moderate‐risk vendors, 194
• Access Control, 49, 120, 222, 351
• Access Management, 39–40, 162, 190, 191, 194, 197
• access phase, of access management, 40
• Access Privileges, in NYDFS, 51
• access types, 40
• Acquisition Security Framework (ASF), 127
• ad‐hoc process, 53–54
• administrator rights, remote access and, 89–90
• Adobe, 85
• Advanced Encryption Standard (AES), 39
• Advanced Persistent Threat (APT), 3, 9, 46, 58, 344, 431–434
• Adverline, 20
• adware, 62
• AES‐128, 39
• AES‐256, 39
• Aetna, 20, 85
• Agilisium, 19
• Air Canada, 19
• Alibaba, 61
• Amadeus, 20
• Amazon, 18, 19, 23, 85, 96, 310
• Amazon CloudWatch Alarms, Logs, and Events, 310
• Amazon Elastic Block Store (EBS) Public Snapshot, 300
• Amazon Relational Database Service (RDS) Public Snapshot, 300
• Amazon Relational Database Service (RDS) Security Group Risk, 299
• Amazon S3, 299
• Amazon Web Services (AWS), 61, 102
• AMC, 96
• American Bankers Association (ABA), 11
• American Medical Collection Agency (AMCA), 20
• Ancestry.com, 85
• Ann Taylor, 92
• annual review, 194–195, 215
• Anonymous Philippines group, 58
• ANSI X9.31, 345
• antivirus, intake and, 157
• Apache Web Server, 353
• API Management Security Baseline, 308
• Apple, 18
• Applebee's, 20
• application programming interfaces (APIs), 310–312, 349, 414–415
• application security. See Sec ure Development (Design) Lifecycle (SDLC)
• Application Security Testing (AST), 347
• APRANET terminals, 27
• Ascension, 20
• Ashton, Kevin, 385
• Assessment phase, of on‐site ...