Your Vendor Can Be an Attack Vector

Some companies have learned the hard way that their own vendors can inadvertently be a route into the company’s information systems. Guidance Software general counsel, Mark Harrington, and the company’s director of security practice, Anthony Di Bello, discuss how this threat can be addressed by building security assurances into vendor agreements, by working with IT or information security personnel at the company on process and policy improvements and by engaging in cyber “war-games” – essentially cyberattack fire drills.