Dear all

I'm relatively new to the security industry  - less than two years. But I have learned a lot in a short space of time. The firm I work for is a consultancy and InfoSec, data protection, and information assurance plus joining the dots with physical security is our focus.

In my circles there are many conversations going on. One of the most popular at the moment is supplier assurance and many organisations concern that their suppliers represent a large potential cyber- risk, and that they do not manage this particularly well . In my view this is a relatively easy place to reduce the risk, but very few organisations are putting in the effort to do so. The why, is unclear..

Does anyone have views on this ?  Thanks!

Derek Willins - Head of Client Development at Advent IM. UK.