Chapter 1
General Security Concepts
Course: Comptia Security Sy0 701
Subject: Comptia Security Sy0 701.,
Chapter: Security Program Management And Oversight 5514 10432
Lesson 3: Third-Party Risk
This lesson explores third-party risk, which focuses on the security challenges that arise when organizations rely on external vendors, service providers, and partners. It explains how businesses assess, select, and manage vendors to ensure that security requirements are met throughout the vendor lifecycle. In modern enterprise environments, organizations frequently depend on cloud services, software providers, and outsourced IT solutions, which increases exposure to external risks.
By the end of the lesson, you should be able to:
- Explain the process of vendor assessment and selection
- Understand security requirements in vendor agreements and contracts
- Describe vendor monitoring and ongoing risk evaluation
- Use security questionnaires to evaluate third-party risk
- Understand rules of engagement in third-party relationships