Your vendor may be the weakest link: Percentage of third-party breaches doubled in a year

The percentage of confirmed data breaches involving third-party relationships doubled last year as cybercriminals increasingly exploited weak links in supply chains and partner ecosystems. That's according to Verizon's Data Breach Investigations Report (DBIR) —one of the industry's most-watched autopsies on what actually goes …

[Anonymous Coward]

"Criminals are smart and pragmatic; they count every cent and are cost-conscious"

Apart possibly from the "smart" a fair description of the average C-Suite creature.

Perhaps boards should recruit more criminals to their senior executive ranks..."Don't bothеr", like Sondheim's clowns, "they're herе."

[nasser07]

Shared responsibilities

Yes, it is important for our third-parties to have security responsibilities. However, optimum security is collaborative effort where outsourcers also play an essential role with driving and ensuring security measures are place with their third-parties from the onset, continuously monitoring, and revisiting concerns and emerging risks with key third-parties.

Lastly, it is also important to note that certain third-party security controls, for example, MFA, are available to implement and configure - but up to the customers (outsourcers) to implement.