ProcessUnity

A new ransomware group is on the block. The group, named Termite, has claimed responsibility for a ransomware attack on Blue Yonder, which disrupted operations at major companies. Although there is not a ton known about the group, Our CISO Dave Stapleton, states: "Termite appears to be targeting a vulnerability in the Cleo file transfer software. This kind of software is a common target (think MOVEit) due to the nature of its service. Termite exploits a vulnerability that Cleo says they addressed in a previous patch. However, it appears that the patch was insufficient." The potential loss of financial data, personal/health data, and proprietary data may cause significant impacts as a result of the attacks. Learn more about the Termite ransomware group: https://lnkd.in/gT2hcjFG #Ransomware #ThirdPartyBreaches #ThirdPartyRiskManagement

Last week we discussed importing completed assessments via an assessment exchange to modernize your third-party risk program. Ready for step four? Step Four: Augment your exchange data with supplemental questions When using a standardized survey, organizations always have further questions. Will it align with your chosen framework? Will it address your unique requirements? Questionnaire mapping is essential to answering these questions. What are the perks of supplemental questions? ▶️ Map your questionnaire to the standard used by your chosen exchange. ▶️ Identify gaps—questions in your assessment not covered by the exchange. ▶️ Create an ancillary questionnaire for additional domains (e.g., ESG, financial). ▶️ Reduce assessment size from hundreds of questions to 10–20. ▶️ Save time and minimize fatigue for vendors and analysts. Download our white paper today to get started on making your assessments more efficient (and more modern): https://ow.ly/psut50Uv5z0 #ThirdPartyRisks #TPRM #CyberSecurity

Infamous Chinese state hackers, known as Salt Typhoon, have breached telecommunications companies in dozens of countries. The hackers were able to compromise private companies by exploiting vulnerabilities in their systems that have likely been accessible for two years. However, it's believed at this time that no classified communications have been compromised. Read more about the White House's warnings on the Salt Typhoon attacks: https://lnkd.in/eKUcibDi #CyberSecurity #Telecommunications #TPRM #RiskManagement

Last week we shared how to determine the scope of assessment needed for a given vendor based on their inherent risk. What's next? Step Three: Import completed assessments via a centralized assessment exchange. If using a platform with access to a centralized assessment exchange, organizations can request previously submitted assessment data easily from third parties. Benefits of this include: ▶️ Effortless Integration: Request and import standard assessments with a single click. ▶️ Cost Savings: Covers 25-40% of vendor assessments, preventing extra expenses. ▶️ Exclusive Data Access: Access assessments from hard-to-reach companies like Salesforce and AWS. Download our white paper today to get started on your journey, and see how you can access a third-party assessment exchange: https://ow.ly/HOFB50UuyN3 #ThirdPartyRisk #TPRM #CyberSecurity

We’re feeling celebratory 🎉 This past year, we’ve hit some major milestones and made a lot of progress on our roadmap to innovation. Highlights from 2024 include:   ⚡️ The first anniversary of ProcessUnity’s CyberGRX acquisition, officially bringing to market the industry’s first-ever proactive, all-in-one platform for automation, workflow, and data.  ️⚡️The launch of new solutions for Threat and Vulnerability Response and DORA to help organizations mitigate emerging risks and adapt to global regulations.  ⚡️ UNITE (our global customer summit) achieved record attendance, empowering our users through platform training and certifications.  ⚡️ We earned the strongest customer feedback in The Forrester Wave™: TPRM Platforms, Q1 2024.  As we look ahead to 2025, we are excited to continue modernizing the TPRM market with planned platform advancements in regard to AI and data! Check our full press release to learn more about our 2025 innovation plans: https://lnkd.in/dE33v7U8 #ProcessUnity #TPRM #Innovation #AI #ThirdPartyRiskManagement 

In an era where digital transformation is accelerating, future-proofing against risks has never been more critical. Our CISO, Dave Stapleton, joined other industry experts in this insightful CIO.com article, to discuss how resilient leaders are tackling the evolving risk landscape, including key strategies for building resilience and navigating third-party risk management challenges in a rapidly changing world. Dive in to learn what industry challenges today’s leaders are focusing on moving into 2025. https://lnkd.in/eQW5n3ni #ThirdPartyRisk #CIOLeadership #Cybersecurity #Resilience

What's a third-party vulnerability gap? It's when the volume of third parties significantly outpaces the resources an organization has to assess them. Antiquated tools and market challenges are only widening this gap. Modernizing your third-party risk management program can help close this gap; our latest blog outlines key components for modernization: 1. Automated Assessment and Monitoring Technology 2. Centralized Data and Risk Information for Informed Decisions 3. Access to a Third-Party Assessment Exchange Database 4. Leveraging Artificial Intelligence for Advanced Analysis and Efficiency Read the full piece here: https://lnkd.in/ectiqVf5 #TPRM #ThirdPartyRisk #RiskManagement

The one-month countdown until January 17th is on! In just a few weeks, the EU will begin enforcing the Digital Operational Resilience Act (DORA). Joel Brandon, our head of sales for EMEA, discusses how the DORA act gives financial entities the opportunity to focus on building resilience against threats, and how it will encourage organizations to enhance their overall security posture and foster collaboration. As we close in on the January deadline, read the full CSO Online article with Joel's thoughts on how DORA could ultimately make the global financial sector safer: https://lnkd.in/gpFCc6Tx #DORA #Compliance #CyberSecurity #ThirdPartyRisk #TPRM

As we are nearing the end of 2024, we're reflecting back on the biggest IT outage of the year and it's stark reminder of how interconnected our ecosystems are. The impact of the CrowdStrike outage was felt broadly and our CISO Dave Stapleton was able to provide some insights to Infosecurity Magazine on lessons learned. Dave asserted that the incident should caution organizations to think more carefully before deploying an update, given the huge potential of a serious disruption if a bad patch is installed. Read the full article with Dave's thoughts: https://lnkd.in/dfUDxEUs #ThirdPartyRiskManagement #TPRM #CrowdStrike

Meet Matt Bianchi, a Product Solutions Manager at ProcessUnity! Matt provides strategic leadership to the Product Solutions Team by overseeing operations of the research, design, delivery, and documentation of the go-to-market solutions that empower our customers to manage risk and streamline operations effectively. This year, the Product Solutions Team successfully delivered multiple product solutions that seamlessly integrate the ProcessUnity Workflow Platform with the recently acquired ProcessUnity Global Risk Exchange. Outside of spearheading innovation at ProcessUnity, Matt enjoys spending time with family, their beloved dog, and digging into home projects and gardening. Thanks, Matt, for all that you do 🙌