Vendor Cyber Risk Management

Date: 27. February 2024 at 3.00 p.m. (CEST)
Speakers: David Rosenthal, Rolf A. Becker
Location: Online (Webinar)

Various recent cyber-attacks on information technology service providers have made it clear that companies need to improve their risk governance and control over the information and cyber security of their suppliers. But what should and can companies practically do?
 
These questions were answered in our webinar. As a special guest, we had the pleasure of welcoming Rolf A. Becker, of Cloud Risk Governance Consulting (www.cloudriskgovernance.ch), who has successfully implemented a provider cloud and cyber risk assessment and control governance framework at a large financial institution. He gave an insight into lessons learned, a reality check and practical ways forward for large and small institutions – and why you should look for more than the ISO 27001 / 27017, SOC1 or SOC2 Type II reports.
 
Our partner David Rosenthal, head of the VISCHER Data & Privacy team and co-head of TMT, complemented this with the legal viewpoint (why are we doing all this?) and his experience in negotiating contracts for clients with both large cloud providers and smaller outfits.

You can rewatch the webinar below and download the slides presented during the webinar.