34Vendor Cyber Risk Overview

DOI: 10.4324/9781003052616-44

Vendors are responsible for more than half of data breaches and their breaches are typically an order of magnitude more costly than a first party data breach.

Alex Golbin, Global Head of Risk Assessments Business, IHS Markit

First, second, third, and fourth parties

A first party is your company and all the on-premise digital assets. As you learned earlier, this risk is the exposures and the likelihood that your company will have a data breach or cyber event.

Second-party cyber risk comes from your customers or members. Customers or members can log into your systems and touch your digital assets. Customers may not have antivirus or other security measures on devices, making it easier ...

Get Enterprise Cybersecurity in Digital Business now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.