Skip to main content
ISC2 Security Congress 2025 Main banner
 
Icon Legend
Additional Fee Required
Additional Fee Required
Pre-Registration Required
Pre-Registration Required
Onsite & Virtual
Onsite & Virtual
Onsite Only
Onsite Only
Earn CPE Credits
Earn CPE Credits
Livestreamed Session
Livestreamed Session
Included in Guest Pass
Included in Guest Pass
Session Recorded
Session Recorded
Student Experience
Student Experience

Call for Papers Proposals

Governance, Risk and Compliance (GRC)

License to Secure: A People-Centric Approach to Managing Cumulative Third-Party Data Breach Risk

Thursday, October 30, 2025
10:30 AM - 11:30 AM CT
Location: Volunteer C
CPE Credits 1
Onsite & Virtual Earn CPE Credits Livestreamed Session Session Recorded
Third-party vendors are essential to business success, but they also introduce hidden risks that traditional assessments miss. Questionnaires, SOC 2 reports, and risk scores evaluate vendors individually but overlook cumulative breach probability. The real risk isn’t a single vendor—it’s the sheer number of vendors handling your data.
This panel introduces a quantitative model (0.07 x N) to measure true third-party breach likelihood and challenges compliance-driven security assumptions.

Attendees will learn how to:
1. Debunk Traditional Risk Assessments: Why they miss cumulative breach risk.
2. Apply Quantitative Modeling: Use 0.07 x N to assess breach probability.
3. Identify Tail Vendors: Recognize small vendors with big risks.

Forget outdated playbooks—this session equips cybersecurity leaders with an actionable strategy to transform vendor risk into a measurable, manageable, and strategic advantage.

Learning Objectives:

  • Quantify Your Real Vendor Risk – Learn how to apply 0.07 x N(umber) to measure the true likelihood of a breach across your third-party ecosystem.
  • Move Beyond Compliance Checkboxes – Understand why traditional assessments fail to capture cumulative risk and how to demand real security transparency from vendors.
  • Transform Vendor Risk into a Strategic Advantage – Discover a new approach to vendor decision-making that aligns risk appetite with business objectives.