Like Vince Vaughn and Owen Wilson indulging themselves at your expense on what was supposed to be the happiest day of your life, threat actors love to crash a union.
Mergers and acquisitions attract cyberattackers, according to tech pros who spoke with IT Brew, and businesses that lack a full understanding of their target partner’s security posture face costly risks.
“These target organizations: Maybe they’re startups, maybe they’re smaller. Thinking about risk management is usually something that comes later in the stage of a company,” Stephen Boyer, co-founder and chief innovation officer at risk-management provider Bitsight, told IT Brew.
In an August midyear assessment, cyber risk management and insurer Resilience revealed that vendor-driven claims were the fastest-growing area in the company’s portfolio, and now “the fastest growing cause of loss.”
“Some of the past year’s most devastating cyber incidents involved heavily interconnected systems or recently acquired companies,” the report’s authors explained.
CISOs have the challenge of knowing their partner’s security posture and are “not always fully understanding [the] cyber risk that’s outside of their direct realm of control,” Ann Irvine, chief data and analytics officer at Resilience, said during a live online presentation on September 12.
Keep reading here.—BH
|