Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

https://www.youtube.com/watch

A firewall's entire job is to control what gets in. In Reach's research, it was the most common source of a configuration-related near miss or exposure, ahead of EDR and identity controls. It does not take much. One rule broadened for a project, one exception that outlived its reason, one change that shipped without anyone checking it against intent. A single overly permissive rule, sitting live between quarterly reviews, is enough.

Third-party risk management can’t stop at static vendor lists. In today’s interconnected business environment, organizations need to understand the dependencies behind their vendors — including subcontractors, fourth parties, and concentration risks that can affect operational resilience. In this clip from Three Hard Truths About TPRM, Julie Gaiaschi, CEO and Co-Founder of TPRA, and Vanessa Jankowski, SVP and GM of Bitsight’s TPRM solution, discuss why stronger Nth-party visibility is essential for modern third-party risk programs.

Not every vendor risk deserves the same level of attention. The real challenge is knowing which risks matter most to the business. In this clip from Three Hard Truths About TPRM, Julie Gaiaschi of TPRA and Vanessa Jankowski of Bitsight discuss why business context is becoming the new filter for prioritizing third-party risk — helping teams focus on continuity, revenue protection, and the vendors that truly impact operations.

Third-party risk doesn’t wait for annual reviews. Vendor ecosystems change constantly, and risk teams need visibility that keeps pace. In this clip from Three Hard Truths About TPRM, Julie Gaiaschi, CEO and Co-Founder of TPRA, and Vanessa Jankowski, SVP and GM of Bitsight’s TPRM solution, explore why continuous monitoring and real-time visibility are critical for stronger accountability, faster response, and better resilience across the vendor ecosystem.

More data does not always mean better decisions. For TPRM teams, the value comes from actionable, correlated intelligence that helps identify which risks need attention first. In this clip from Three Hard Truths About TPRM, Julie Gaiaschi of TPRA and Vanessa Jankowski of Bitsight discuss how threat context can help organizations prioritize third-party risk, strengthen supply chain resilience, and support business continuity under pressure.

A trusted security professional with powerful AI access is still a human under pressure. If someone is unemployed, desperate or offered money to look the other way, these tools become much harder to regulate and far easier to misuse.

The UK is banning social media for children and I completely support protecting kids from harmful content. But I'm deeply concerned about what comes next. Age verification requirements, VPN restrictions, OS-level validation - the scope keeps expanding beyond the original intent. History shows this pattern: laws start with good intentions, then governments abuse them.

Keeper’s Just-In-Time Workflow gives admins the control layer needed to manage how privileged access is requested, approved, and used within KeeperPAM putting least privilege into practice directly inside the Keeper Vault.

That moment your phone suddenly goes dark — no signal, no texts, no calls — could be more than a network issue. SIM swap scams are a growing form of identity theft where criminals impersonate you to your mobile carrier, hijack your phone number, and use it to bypass SMS-based security on your bank, email, and social accounts.