In this podcast, you'll learn how your vendor's approach to CIA triad of information security impacts you and your customers.
Guide: Vendor Due Diligence
Infographic: Vendor + Product + Risk = Documentation
Welcome to this week’s Third Party Thursday! My name is Aaron Kirkpatrick and I’m the Information Security Officer here at Venminder. During this video we are going to discuss what the CIA triad is and what it has to do with Vendor Management.
Let’s talk about the core fundamental concepts of information security, the CIA triad of information security. How does my vendor’s approach to CIA - or Confidentiality, Integrity and Availability - affect you and your customers?
What is the CIA Triad?
The CIA Triad is the foundation of information security:
You are expected to understand your vendor’s approach to security, which is their posture on Confidentiality, Integrity and Availability.
How do you verify your vendor’s approach?
1. Confidentiality: Can be breached at numerous points along the flow of information.
2. Integrity: Financial institutions have to be confident that their data is not modified.
3. Availability: Through Service Level Agreements, SOC Reviews, Business Continuity and Disaster Recovery Plan Reviews and Cybersecurity Reviews financial institutions need to have access to their information.
To fully understand your vendor’s position on Confidentiality, Integrity and Availability, it’s essential to perform your vendor due diligence.
Again, I’m Aaron Kirkpatrick and thank you for watching! If you haven't already, please subscribe to the Third Party Thursday series!