Notes on vendor and cyber risk.

Practical reading for clearer, evidence-led security decisions.

Articles

Notes on vendor and cyber risk.

Assessments

The hidden cost of static security questionnaires

Why annual forms cost more than they appear to — and what to ask instead.

Read article →
Shadow IT

Shadow IT: the vendor risk you can’t see

How unmanaged SaaS and AI tools reach your data, and how to find them.

Read article ↗
Strategy

From point-in-time to point-of-change

How third-party risk moves from annual reviews to change-driven checks.

Read article ↗
Strategy

The business case for continuous vendor monitoring

Framing the cost of stale vendor evidence for leadership.

Read article ↗
Access

Zero trust for third-party access

Applying least privilege and just-in-time access to vendors and MSPs.

Read article ↗
AI

AI-powered vendor risk assessment

Where AI helps in vendor review, and where people must decide.

Read article ↗
Next step

Have a specific question right now?

Describe it in your own words and get a preliminary assessment. Nothing is sent until you approve it.