Peer-Driven Insights

Vendor Management

Active Ambassadors in This Topic

Chris Oehlerking

Honeywell

Manufacturing, 1k - 5k

Rajnish Malhotra

Emergent Biosolutions

Healthcare and Biotech, 1k - 5k

Clifton Persaud

ISACA

Education, 10k+

View All Community Ambassadors

Community Posts

When adopting a new SaaS tool, what's the number 1 thing that gives you confidence in the vendor?

Read More Comments

If you have had a negative experience with a vendor (without naming the vendor), what did you learn from it?

Read More Comments

Open Response: What SaaS tool could you/your organization truly not live without?

Read More Comments

What do you do with unsolicited vendor gifts?

Keep it21%

I never accept them32%

Donate it12%

Depends on the dollar amount28%

Other (leave a comment)4%

View Results

What's a quick win for optimizing spend? What's been your focus or "lowest hanging fruit"?

Read More Comments

What are you most looking for from vendors that pitch you?

Read More Comments

CrowdStrike outage: Any quick advice for orgs affected? What immediate actions are your IT and other teams taking to mitigate the effects of the outage?

Read More Comments

I'm building most on... share "why" in comments...

Public Cloud71%

Private Cloud28%

Should the endpoint protection marketplace (i.e. EDR and anti-malware) provide below the operating system malicious code execution prevention?

Read More Comments

How important is a free trial or "freemium" offer to you when evaluating new software.

Very important25%

Somewhat important57%

Not important or unimportant12%

Somewhat unimportant2%

Very unimportant1%

View Results

What vendor issues have you seen in your landscape when it comes to 3rd party supplier risk management?

For security vendor management, is it always best to stick with peers who operate in your own sector?

Read More Comments

How do you keep vendors in check for security reviews?

Read More Comments

Has a vendor ever violated your trust, or failed to acknowledge an incident?

Read More Comments

Can sustainability initiatives be financially beneficial?

Read More Comments

If these companies were affected then the foundation of computing could be at risk. If you could manipulate at the hardware layer via the firmware, BIOS, ect then a threat actor could weaponize well below the operating system which brings in to question the integrity of the entire computing stack and everything above it. The firmware and bios are like the rebar and concrete for a building. If that foundation is weak then the entire structure and anything dependent on it is at risk. We cannot underestimate the potential or the severity of these companies being potentially affected by the SolarWinds hack and what that means for the foundational computing hardware they provide to the world. What do others think ? How could this impact your organization ?

Big tech companies including Intel, Nvidia, and Cisco were all infected during the SolarWinds hack - The Verge