Gartner is making a compelling case that security organizations need to adapt the traditional CIA Security Triad (i.e. Confidentiality, Integrity, and Availability) to now account for partnerships and relationships established with an organization’s vendors. This is especially important given how many services an organization utilizes are often in the SaaS category.
Are you and your teams ready for this evolution?
Does your organization provide guidance to help with the distributed risk decisions individuals are already making on a daily basis e.g. Staff member uploading a backup of sensitive files to their personal cloud storage.