• Third-party risk management
  • GRC
  • ISO 27001

I still remember my first audit under ISO 27001, when a single unanswered question about a third-party data processor…