We use cookies to ensure you get the best experience on our website.
Visit our Cookie Policy for more information.
Panorays’ Blog

Articles by Dov Goldman

Learn about the latest research and happenings in TPCRM
Dov Goldman - VP of Risk Strategy @ Panorays
Dov Goldman
VP of Risk Strategy @ Panorays
Dov is a serial entrepreneur who’s been involved with third-party programs of all sizes, and is the go-to person for explaining the difference between inherent and residual risk.

Expertise

Dov is a seasoned entrepreneur, navigating the world of startups with finesse. With a knack for breaking down the nuances of third-party risk management, he’s your ultimate guide in explaining inherent versus residual risk. Armed with years of expertise, Dov will untangle the intricacies of risk assessment and demystify the complexities of third-party risk.

Experience

Throughout his extensive career as a technology entrepreneur, Dov has emphasized the human dimension of implementing IT systems and the pragmatic necessity of delivering tangible business outcomes. With decades of experience spanning multiple startups, Dov has collaborated closely with cyber and risk leaders across numerous large enterprises, specializing in third-party risk management.

Cybersecurity Authoritativeness

Dov has earned recognition as a thought leader, adept at simplifying intricate problems and their resolutions into easily understandable terms. Regarded as the ‘third-party therapist’ within the industry, Dov possesses an intuitive understanding of the challenges faced by third-party risk leaders. His engaging speaking engagements and insightful written pieces captivate audiences, blending entertainment with informative content.

Dov has written and been quoted about third party cyber risk and privacy in various papers, cybersecurity news publications, websites and resources, including:

Dov has spoken at and chaired numerous industry events, including recently:

Dov has a number of patents to his name, including one for the design of a third-party cyber risk module:

Education

Dov graduated from Columbia University in New York with a degree in Computer Sciences. His time there was more than just academics—it was a transformative period where he honed his skills and immersed himself in tech competitions and workshops. Columbia equipped him not only with technical expertise but also instilled in him a relentless drive for excellence that defines his career.

Latests Posts by Dov Goldman

Vendor Risk Assessment

Top Vendor Risk Mitigation Strategies Every Business Should Know

You rely on your vendors for vital services and/or components like cloud hosting services, payment processing, or…
Supply Chain Vulnerability

How to Prepare for Supply Chain Disruptions and Vendor Failures

Today's global supply chains bring a lot of benefits for enterprises. Increased global competition lowers prices and raises quality, and working with third parties frees businesses…
Third Party Risk Management (TPRM)

What is Third Party Risk Management (TPRM)?

Third-Party Risk Management (TPRM) is the process of managing risks with third parties that are integrated into your business IT infrastructure, and an essential cybersecurity practice…
Security Questionnaires

Top Vendor Assessment Questionnaires

Your organization is torn between two conflicting issues. You depend on third-party…
Building a Cybersecurity Culture for Your Third Party Vendors

How Vendor Security Rating Systems Strengthen Your Cybersecurity…

When cybercriminals successfully exploited a vulnerability in the MOVEit Transfer application, that…
What is an Attack Vector?

Navigating NIS2 Compliance for Third-Party Risk Management

If you operate in one of the 15 sectors covered by the…
Third-Party Cloud Security

What is CSPM? A Guide to Cloud Security…

Once upon a time, most businesses hosted all their critical infrastructure on…
Supply chain security

Ensuring Global Supply Chain Compliance Across Regulations

The €1.2 billion penalty fined to Meta for GDPR non-compliance highlighted the…
DORA's Global Impact: What It Means for the US and Beyond

DORA’s Global Impact: What It Means for the…

Find out how DORA impacts US cyber resilience, why it matters globally,…
Zero Trust Approach for Third-Party Risk Management

How Global Regulatory Compliance Shapes TPRM

With 98% of organizations integrated with at least one-third party experiencing a…
Supply chain security

Understanding IoT Cybersecurity in Supply Chains

If you feel like Internet of Things (IoT) devices are everywhere you…
AI In Risk Management

Cybersecurity in the Era of Generative AI: Risks…

Generative AI in cybersecurity presents the industry with a double-edged sword. Since…
Digital Supply Chain

Supply Chain Risk Management: Moving from Reactive to…

In a bygone era, reactive supply chain risk management was enough to…
DORA

How Does DORA Regulation Compare with GDPR?

The rapid digital transformation of the past few decades led to huge…
DORA

DORA Compliance: A Guide to Surviving Regulatory Stress

January 17, 2025 is the official date the DORA regulation goes into…

The Fastest and Easiest Way
to Do Business Together, Securely