Managing third parties – an information security perspective

Abstract

Organisations work with many third party service providers, from bankers to cleaners, and IT auditors to facility managers. A common and pressing problem is how to share information, in many formats, between the organisation and its service providers. What are some of the major issues associated with working with service providers from an information security perspective and how do you address them?