{"id":1011,"date":"2016-04-07T16:59:00","date_gmt":"2016-04-07T20:59:00","guid":{"rendered":"https:\/\/solutionsreview.com\/identity-management\/?p=1011"},"modified":"2016-04-07T17:09:27","modified_gmt":"2016-04-07T21:09:27","slug":"third-party-risk-survey","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/identity-management\/third-party-risk-survey\/","title":{"rendered":"Third Party Vendors Pose an Outsized Security Threat, Survey Finds"},"content":{"rendered":"<p style=\"text-align: justify\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-1012\" src=\"https:\/\/solutionsreview.com\/identity-management\/files\/2016\/04\/Bomgar_survey.png\" alt=\"Bomgar_survey\" width=\"600\" height=\"300\" srcset=\"https:\/\/solutionsreview.com\/identity-management\/files\/2016\/04\/Bomgar_survey.png 600w, https:\/\/solutionsreview.com\/identity-management\/files\/2016\/04\/Bomgar_survey-300x150.png 300w, https:\/\/solutionsreview.com\/identity-management\/files\/2016\/04\/Bomgar_survey-540x270.png 540w, https:\/\/solutionsreview.com\/identity-management\/files\/2016\/04\/Bomgar_survey-162x81.png 162w, https:\/\/solutionsreview.com\/identity-management\/files\/2016\/04\/Bomgar_survey-360x180.png 360w\" sizes=\"(max-width: 600px) 100vw, 600px\" \/>Just 35 percent of IT pros are confident that they know the exact number of vendors accessing their IT systems , according to the results of the new Vendor Vulnerability research report from <a href=\"https:\/\/www.bomgar.com\" target=\"_blank\">Bomgar<\/a>, a provider of secure access solutions. The report finds that third-party vendors can be a significant security risk if their access to IT systems are not managed and monitored correctly.<\/p>\n<p style=\"text-align: justify\">The new study explores the visibility, control, and management that organizations in the US and Europe have over external parties accessing their IT networks. It also uncovers the level of awareness organizations have over the potential risks \u2013 such as cyber-attacks and data breaches \u2013 that vendors accessing systems remotely can pose, and looks at the policies and processes organizations have in place to protect themselves, and their third-party vendors, from these issues.<\/p>\n<p style=\"text-align: justify\">81 percent of survey respondents admitted that high-profile data breaches have increased their awareness of the need for better third-party vendor controls.<\/p>\n<p style=\"text-align: justify\">Last year\u2019s hack of the federal Office of Personnel Management (OPM), for example, was made possible when hackers obtained a credential used by KeyPoint Government Solutions, a third-party contractor that conducts background investigations of applicants for federal jobs that require a security clearance.<\/p>\n<p style=\"text-align: justify\">In another example, 2013\u2019s infamous Target data breach started in a similar manner when hackers stole a network login from an HVAC contractor working for Target Corporation.<\/p>\n<p style=\"text-align: justify\">Despite this increased awareness, just a third (35 percent) or respondents are confident they know the exact number of vendors accessing their IT systems.<\/p>\n<p style=\"text-align: justify\">The Vendor Vulnerability research reveals that on average 89 third-party vendors access a typical company\u2019s network each week, and that number is likely to grow. Three-quarters (75 percent) of those polled stated the number of third-party vendors used by their organization has increased in the last two years, and 71 percent believe the numbers will continue to increase in the next two years.<\/p>\n<p style=\"text-align: justify\">The report uncovered a high level of trust in third-party vendors, but a low level of visibility of vendor access to IT systems. 92 percent of respondents say they trust vendors completely or most of the time, although two-thirds (67 percent) admit they tend to trust vendors too much. Astonishingly, only 34 percent knew the number of log-ins to their network attributed to third-party vendors, and 69 percent admitted they had definitely or possibly suffered a security breach resulting from vendor access in the past year.<\/p>\n<p style=\"text-align: justify\">\u201cThird-party vendors play a vital and growing role in supporting organizations\u2019 systems, applications, and devices. However, they also represent a complex network that many organizations are struggling to appraise and manage correctly,\u201d said Matt Dircks, CEO of Bomgar. \u201cIt\u2019s clear from the research that there\u2019s a high level of trust in third-party vendors, but very little visibility or control over what they\u2019re doing when connected to the<\/p>\n<p style=\"text-align: justify\">company\u2019s network. This combination of dependence, trust, and lack of control has created the \u2018perfect storm\u2019 for security breaches across companies of all sizes. If a hacker can compromise and pose as a legitimate vendor, they may have unfettered access to networks for weeks or even months; plenty of time to steal sensitive data or shut down critical systems.\u201d<\/p>\n<p style=\"text-align: justify\">You can read the report in full here:\u00a0<a href=\"https:\/\/www.bomgar.com\/vendorvulnerability\" target=\"_blank\">https:\/\/www.bomgar.com\/vendorvulnerability<\/a><\/p>\n<p style=\"text-align: justify\"><div class=\"column half\"><p>[youtube https:\/\/www.youtube.com\/watch?v=96VDo2yv3-g?rel=0&amp;showinfo=0&amp;w=225&amp;h=127]<\/p>\n<p style=\"text-align: justify\"><\/div><\/p>\n<div class=\"column half last\"><p><em>Check out Solutions Review\u2019s all-new 2016 Identity Management Buyer\u2019s Guide, featuring ten questions to ask before purchasing, a full market overview, and detailed profiles of the top 28 IAM \u00a0companies and solution backgrounds, key features, and\u00a0best use cases. <a href=\"https:\/\/solutionsreview.com\/identity-management\/get-a-free-identity-and-access-management-software-solutions-buyers-guide\/\">Download for free here.<\/a><\/em><\/p>\n<p style=\"text-align: justify\"><\/div><div class=\"clear\"><\/div>\n","protected":false},"excerpt":{"rendered":"<p>Just 35 percent of IT pros are confident that they know the exact number of vendors accessing their IT systems , according to the results of the new Vendor Vulnerability research report from Bomgar, a provider of secure access solutions. The report finds that third-party vendors can be a significant security risk if their access [&hellip;]<\/p>\n","protected":false},"author":24,"featured_media":1012,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[6,1],"tags":[251,31,105,16,112,94,127,250],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v23.5 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Third Party Vendors Pose an Outsized Security Threat, Survey Finds - Identity and Access Management Solutions | Solutions Review<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/solutionsreview.com\/identity-management\/third-party-risk-survey\/\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Jeff Edwards\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/third-party-risk-survey\/\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/third-party-risk-survey\/\",\"name\":\"Third Party Vendors Pose an Outsized Security Threat, Survey Finds - Identity and Access Management Solutions | Solutions Review\",\"isPartOf\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/third-party-risk-survey\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/third-party-risk-survey\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2016\/04\/Bomgar_survey.png\",\"datePublished\":\"2016-04-07T20:59:00+00:00\",\"dateModified\":\"2016-04-07T21:09:27+00:00\",\"author\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/3d31b4b6a777a91476a65c087be260e6\"},\"breadcrumb\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/third-party-risk-survey\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/solutionsreview.com\/identity-management\/third-party-risk-survey\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/third-party-risk-survey\/#primaryimage\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2016\/04\/Bomgar_survey.png\",\"contentUrl\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2016\/04\/Bomgar_survey.png\",\"width\":600,\"height\":300},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/third-party-risk-survey\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/solutionsreview.com\/identity-management\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Third Party Vendors Pose an Outsized Security Threat, Survey Finds\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#website\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/\",\"name\":\"Identity and Access Management Solutions | Solutions Review\",\"description\":\"Evaluating Enterprise IAM Software, Identity Governance &amp; Access Control Tools.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/solutionsreview.com\/identity-management\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/3d31b4b6a777a91476a65c087be260e6\",\"name\":\"Jeff Edwards\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/8471d2b63e0587b41d829ecc153ba8e7?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/8471d2b63e0587b41d829ecc153ba8e7?s=96&d=mm&r=g\",\"caption\":\"Jeff Edwards\"},\"description\":\"Jeff Edwards is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in Journalism from the University of Massachusetts Amherst, and previously worked as a reporter covering Boston City Hall.\",\"sameAs\":[\"https:\/\/solutionsreview.com\",\"https:\/\/x.com\/InfoSec_Review\"],\"url\":\"https:\/\/solutionsreview.com\/identity-management\/author\/jedwards\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Third Party Vendors Pose an Outsized Security Threat, Survey Finds - Identity and Access Management Solutions | Solutions Review","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/solutionsreview.com\/identity-management\/third-party-risk-survey\/","twitter_misc":{"Written by":"Jeff Edwards","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/solutionsreview.com\/identity-management\/third-party-risk-survey\/","url":"https:\/\/solutionsreview.com\/identity-management\/third-party-risk-survey\/","name":"Third Party Vendors Pose an Outsized Security Threat, Survey Finds - Identity and Access Management Solutions | Solutions Review","isPartOf":{"@id":"https:\/\/solutionsreview.com\/identity-management\/#website"},"primaryImageOfPage":{"@id":"https:\/\/solutionsreview.com\/identity-management\/third-party-risk-survey\/#primaryimage"},"image":{"@id":"https:\/\/solutionsreview.com\/identity-management\/third-party-risk-survey\/#primaryimage"},"thumbnailUrl":"https:\/\/solutionsreview.com\/identity-management\/files\/2016\/04\/Bomgar_survey.png","datePublished":"2016-04-07T20:59:00+00:00","dateModified":"2016-04-07T21:09:27+00:00","author":{"@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/3d31b4b6a777a91476a65c087be260e6"},"breadcrumb":{"@id":"https:\/\/solutionsreview.com\/identity-management\/third-party-risk-survey\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/solutionsreview.com\/identity-management\/third-party-risk-survey\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/identity-management\/third-party-risk-survey\/#primaryimage","url":"https:\/\/solutionsreview.com\/identity-management\/files\/2016\/04\/Bomgar_survey.png","contentUrl":"https:\/\/solutionsreview.com\/identity-management\/files\/2016\/04\/Bomgar_survey.png","width":600,"height":300},{"@type":"BreadcrumbList","@id":"https:\/\/solutionsreview.com\/identity-management\/third-party-risk-survey\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/solutionsreview.com\/identity-management\/"},{"@type":"ListItem","position":2,"name":"Third Party Vendors Pose an Outsized Security Threat, Survey Finds"}]},{"@type":"WebSite","@id":"https:\/\/solutionsreview.com\/identity-management\/#website","url":"https:\/\/solutionsreview.com\/identity-management\/","name":"Identity and Access Management Solutions | Solutions Review","description":"Evaluating Enterprise IAM Software, Identity Governance &amp; Access Control Tools.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/solutionsreview.com\/identity-management\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/3d31b4b6a777a91476a65c087be260e6","name":"Jeff Edwards","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/8471d2b63e0587b41d829ecc153ba8e7?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/8471d2b63e0587b41d829ecc153ba8e7?s=96&d=mm&r=g","caption":"Jeff Edwards"},"description":"Jeff Edwards is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in Journalism from the University of Massachusetts Amherst, and previously worked as a reporter covering Boston City Hall.","sameAs":["https:\/\/solutionsreview.com","https:\/\/x.com\/InfoSec_Review"],"url":"https:\/\/solutionsreview.com\/identity-management\/author\/jedwards\/"}]}},"_links":{"self":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts\/1011"}],"collection":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/users\/24"}],"replies":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/comments?post=1011"}],"version-history":[{"count":0,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts\/1011\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/media\/1012"}],"wp:attachment":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/media?parent=1011"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/categories?post=1011"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/tags?post=1011"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}