Topic
Vendor Management
98 published works
Ascend With Winstead
Cybersecurity Awareness Month 2026: What Recent Cybersecurity Incidents Teach About the Duty to Mitigate Vendor and Service-Provider Risk
For years, organizations viewed cybersecurity primarily as an internal challenge. Boards, executives, legal departments, and IT teams focused on protecting their own systems, deploying security tools, training employees, and developing…
Legal Health Information Exchange
“But It Was Our Vendor’s Breach!” Labcorp’s $2.3 Million Settlement Puts Business Associate Oversight Back Under the Microscope
The breach happened at Labcorp’s debt collector, American Medical Collection Agency, but now Labcorp is paying nearly $2.3 million to the states and agreeing to substantial changes in how it…
Red Clover Advisors Blog
What Belongs in Your Third-Party Agreements and Vendor Contracts
By Jodi Daniels
This article reflects our perspective as privacy consultants and should not be considered legal advice. Every organization’s risk and regulatory footprint is different; as such, we advise you to work…
Taft Technology and Artificial Intelligence Insights
Take Back Your Power: Overcoming ERP Software Vendor Lock-In
Companies today are more tied to a single ERP vendor than ever. That dependency carries real risk unless you manage it well. What is vendor lock-in? It's relying on one…
The Formiti Privacy News Blog
Privacy Vendor Audit Service for Global Teams
By Formiti
A privacy vendor audit service for global teams - risk-based triage, evidence standards, contract alignment and ongoing supplier oversight that holds up.
Consumer Class Defense Blog
Webinar – Decoding Data Privacy: Vendor Contracting at the Intersection of Employment and Commercial Litigation
By Kristine Argentine, Ada Dolph, Paul Yovanic Jr., Ala Salameh
Thursday, August 6, 20262:00 p.m. to 3:00 p.m. Eastern1:00 p.m. to 2:00 p.m. Central12:00 p.m. to 1:00 p.m. Mountain11:00 a.m. to 12:00 p.m. Pacific REGISTER HERE About the Decoding Data…
The Formiti Privacy News Blog
Vendor Audit Service Review for Compliance Teams
By Formiti
Vendor audit service review — scope, evidence, jurisdictional coverage, remediation, AI supplier assessment and the three-team operating model that holds up under scrutiny.
The Formiti Privacy News Blog
Vendor Audit Programme Template That Works
By Formiti
A vendor audit programme template that works — governance, scope, methodology, control library, findings, remediation and reporting that hold up under scrutiny.
Workplace Privacy, Data Management & Security Report
Key Vendor Management Lessons Educational Institutions Can Learn from Recent EdTech Vendor Data Breach
By Damon W. Silver, Sara H. Harrison
Takeaways Educational Institutions use Software as a Service platforms to facilitate operations, but doing so carries significant risk that needs to be carefully managed. Strong vendor oversight, tight contracts, and…
Workplace Privacy, Data Management & Security Report
The Delve Scandal: Why a SOC 2 Report Can’t Be a “Check-the-Box” Exercise for Vendor Management
By Joseph J. Lazzarotti, Damon W. Silver
A recent Inc. article highlights an unsettling controversy involving Delve, a Y Combinator-backed compliance startup, and allegations that strike at the heart of how organizations rely on SOC (System and…