29
Oct
Most security incidents don’t stay inside the organization that suffered them. Attackers go through suppliers: a software vendor with access to customer data, a managed service provider with admin credentials, or a library buried in a product’s dependencies. Regulators have noticed, and frameworks like ISO 27001, NIS2, and DORA now expect organizations to control supplier risk, not just assess it once. ISO 27036 is the international...
Read More