Information Security Risk Assessments for Third Parties

Content

This session covers:

• Information on security risk assessment considerations – baseline principles
• Agency third parties foundational understanding, including:
  • WHAT is an Agency Third party
  • WHAT role do third parties play in government (and links to information security)
  • When to consider information security for Third Parties in Government
• Information on security risk assessments for third parties, including:
  • Types of information security risks
  • Consequences and impacts (with examples)
  • Establishing good governance and information controls with vendors
  • Resources (including references, tools, Agency delegates)
• Practical exercise of an information security risk assessment

Who Should Attend

• All staff who liaise, coordinate or administer third party vendors (small or larger)
• Staff who have or aspire to have a role in onboarding, managing or procuring third party vendors (large or small)
• All staff for basic awareness and understanding of importance of information security when dealing with vendors

Benefits to You and Your Organisation 

• Staff uplift capability and increased protection of government information in dealings with third parties, that can reduce exposure of risk to government.
• Controls awareness
• Risk mindset when liaising with vendors and government information