Loading lesson

Third-party risk assessment and management

Domain 5: security program management and oversight (V7 20% · V8 14%) · Lesson 3 of 6

Lesson 3 of 6

Ask a tutor

Lesson 3 of 6 · Domain 5: security program management and oversight (V7 20% · V8 14%)

Third-party risk assessment and management

3 quick checks≈3% of the testFoundational

Reading is free. Sign in to tick off lessons, keep your place and track your mastery.

By the end you’ll be able to

Assess vendors with penetration testing, right-to-audit clauses, evidence of internal audits, independent assessments, supply chain analysis and questionnaires
Select vendors using due diligence and conflict-of-interest checks, and RFP, RFI, RFQ and EOI processes (SY0-801)
Compare agreement types: SLA, SLO (SY0-801), MOA, MOU, MSA, SOW/work order, NDA and BPA

0% read

This lesson hasn’t been written yet

Security+ lessons are written from the official syllabus the first time a learner opens them, then saved for everyone. Sign in and this one is written for you in a minute or two. It’s free.

Sign in Create a free account