Third Party Audit
Are your business partners your sensitive data for which you are liable?
During a merger or acquisition, are you prepared to integrate the two firms while fully protecting your information assets?
Organization’s are no longer single entities, conducting business in a vacuum. Instead, the focus is on the “extended enterprise” – business managers have to integrate remote locations, subsidiaries, partners, operations that are outsourced to third parties in local or foreign locations, and mergers and acquisitions.
The technical aspects of connectivity can be daunting; however, and securing the data flowing between these points can be an even greater challenge, particularly when the various legal and regulatory frameworks must be considered.
DigitalDefence combines technical knowledge and experience, a strong practical knowledge of international laws and regulations, and a deep respect for different business cultures to provide our third party auditing service.
Service Delivery
DigitalDefence is the trusted partner for performing objective and independent assessments of third parties. The Third Party Assessment will assess some or all of the following:
- Corporate governance, including information security and privacy strategy as well as the overall corporate culture with regards to security and privacy;
- Policies, standards, and procedures that control access to, and use of, corporate data;
- Compliance with all relevant government privacy and security standards;
- Management, technical and operational controls in place to protect data, including a review of physical security, the network architecture, security controls, vulnerability assessment, and management of findings;
- Application security assessments of business critical applications;
- Review of data that may be at particular risk from external attackers or disgruntled insiders; and,
- Review contractual obligations of third parties, including on-site review of data handling procedures.
Datasheet – Third Party Audit Service [111 kb]
