Đang tải bảng tin…
Security Boulevard0 Hot0 bình luận4 phút đọc
Third-Party Diligence: What the World Cup Reveals
Traditional third-party due diligence focuses on financial health, legal standing, and sanctions screening — but misses the human layer: who actually controls an entity, undisclosed affiliations, and background relationships. Using Qatar 2022 as a case study, opaque payment structures worth hundreds of millions went undetected by standard checks. For US companies, the FCPA holds organizations accountable for what they should have known, making 'we ran a sanctions screen' an insufficient defense. Human-layer due diligence requires analyst-led investigation into beneficial owners, government relationships, and behavioral signals across open sources — not just database lookups. Nisos positions itself as a provider of this intelligence layer for organizations evaluating third-party partnerships.
Nguồn: https://securityboulevard.com/2026/07/third-party-diligence-what-the-world-cup-reveals. 8sync News chỉ tóm tắt và dẫn link; bản quyền nội dung thuộc tác giả và nguồn gốc.
Đề xuất cho bạn
IT Security Guru0 Hot4 phút
Pentesting is dead. Long live pentesting.
Penetration testing remains a widely purchased cybersecurity service, yet it suffers from deep inconsistency — two providers testing the same environment can produce vastly different results. Many organisations treat it as a compliance checkbox rather than a genuine security exercise, driven by cost and regulatory requirements rather than clear security objectives. The evolving complexity of modern environments (cloud, SaaS, supply chains) makes scoping even harder, and a passed pentest can create a false sense of security. The argument here is not that pentesting is dead, but that the industry needs to shift toward outcome-driven, contextual testing focused on realistic attack scenarios and acting on findings — rather than simply obtaining a report.
