OneTrust leads a 2026 ranking of third-party risk tools
Editorial scores, not lab tests, put SecurityScorecard and BitSight just behind OneTrust.
1
Stories per day · 30 days
5 RSS
Relatedtprm2bitsight1compliance1connecticut1data-breach1governance1healthcare1new-york1onetrust1pediatric1securityscorecard1settlement1xtium1
12 stories, newest first · one card per story
Stories tagged #vendor-risk
TPRM Tools Buyer's Guide Evaluates Ten Platforms for 2026
Reviews OneTrust, SecurityScorecard and ProcessUnity on assessment workflows, continuous monitoring and network effects.
1
NY AG James and CT AG Tong Secure $2.7 Million from Boston Children’s Health Physicians and XTIUM for 2024 Data Breach
New York and Connecticut secured $2.7 million from Boston Children's Health Physicians and XTIUM over a 2024 patient-data breach.
3
Trustero automates vendor document reviews with human approval
Trustero launched an AI vendor-risk tool that drafts assessments for human approval.
Three questions a hospital CISO should ask a healthcare fintech vendor
Cylerity CTO/CISO Drew McCombs explains separating PHI from bank partners, keeping humans in the loop for AI decisions, and enabling email MFA at small practices.
1
A four-week plan to tackle vendor concentration risk
A Skycloak founder outlines a four-week plan to uncover hidden vendor concentration and single-provider outage risk.
Labcorp to overhaul data security practices, pay $2.3 million fine for cybersecurity failings
Labcorp will pay $2.3 million and overhaul vendor security after a 2019 breach of 10.2 million customers.
Scytale expands vendor risk management with AI-powered TPRM tools
Scytale launched AI-powered third-party risk management in its Vendors module, automating vendor discovery, risk scoring, and continuous vendor posture monitoring.
2
'Lake America' makes one thing clear: We can't trust U.S. tech companies
TVO opinion analysis argues the 'Lake America' dynamic shows foreign organizations can no longer trust US tech companies.
Supply Chain Attacks in 2026: Why Threat Intelligence Is the Only Early Warning System That Works
Cyble argues supply chain attacks are a primary breach vector, citing Verizon DBIR third-party figures and CISA SBOM guidance to pitch its TPRM platform.
National Life Group CISO expects more vulnerabilities in six months than in thirty years
National Life Group CISO Becky Palmer says agentic AI resolves four of five SOC investigations and urges AI-speed patching practices.
1
Production data in testing is still common, and Tricentis' CISO wants it gone
Tricentis CISO Erika Dean urges keeping production data out of test environments and describes red-teaming that caught a prompt injection gap.
1