Know Thy Vendor's Vendor ..

Amy Malone is attending the Data Protection & Privacy Law Conference in Arlington, Virginia this week and will be providing updates.

The pre-conference workshops at the Data Protection & Privacy Law Compliance Conference have begun! The first workshop covered managing the risk of third party vendors. An important element of ensuring the security and privacy of your vendors is finding out what vendors your vendors are using. As we all know, you can out-source the work, but not the responsibility. And all too often the vendors we are entrusting our information to are also using vendors, increasing the risk that a data breach will occur. As reported in the workshop, 39% of data breaches involve information held by a third party. While a solid business practice is to include language in your vendor agreement restricting your vendor from using vendors, this often only works for the biggest of organizations. An avenue for smaller companies is to request that your vendors provide...