Panorays’ Blog

Articles by Dov Goldman

Learn about the latest research and happenings in TPCRM
Dov Goldman - VP of Risk Strategy @ Panorays
Dov Goldman
VP of Risk Strategy @ Panorays
Dov is a serial entrepreneur who’s been involved with third-party programs of all sizes, and is the go-to person for explaining the difference between inherent and residual risk.

Expertise

Dov is a seasoned entrepreneur, navigating the world of startups with finesse. With a knack for breaking down the nuances of third-party risk management, he’s your ultimate guide in explaining inherent versus residual risk. Armed with years of expertise, Dov will untangle the intricacies of risk assessment and demystify the complexities of third-party risk.

Experience

Throughout his extensive career as a technology entrepreneur, Dov has emphasized the human dimension of implementing IT systems and the pragmatic necessity of delivering tangible business outcomes. With decades of experience spanning multiple startups, Dov has collaborated closely with cyber and risk leaders across numerous large enterprises, specializing in third-party risk management.

Cybersecurity Authoritativeness

Dov has earned recognition as a thought leader, adept at simplifying intricate problems and their resolutions into easily understandable terms. Regarded as the ‘third-party therapist’ within the industry, Dov possesses an intuitive understanding of the challenges faced by third-party risk leaders. His engaging speaking engagements and insightful written pieces captivate audiences, blending entertainment with informative content.

Dov has written and been quoted about third party cyber risk and privacy in various papers, cybersecurity news publications, websites and resources, including:

Dov has spoken at and chaired numerous industry events, including recently:

Dov has a number of patents to his name, including one for the design of a third-party cyber risk module:

Education

Dov graduated from Columbia University in New York with a degree in Computer Sciences. His time there was more than just academics—it was a transformative period where he honed his skills and immersed himself in tech competitions and workshops. Columbia equipped him not only with technical expertise but also instilled in him a relentless drive for excellence that defines his career.

Latests Posts by Dov Goldman

Security Compliance

What is Security Compliance?

Security and compliance refer to the active steps an organization takes to protect its assets and meet…
What is HIPAA

What is HIPAA and How to Stay Compliant in 2026

The HIPAA Audit: What to Know Before You Get the Notice The Health Insurance Portability and Accountability Act (HIPAA) is a set of laws that govern…
Third Party Data Breaches

Yahoo Data Breaches

The Yahoo data breaches were not a single security incident but a series of massive cyberattacks that occurred over several years. The most significant Yahoo data…
Third-Party Data Breaches

Facebook Data Breach

When people search for "Facebook data breach," they're usually trying to make…
Third-party data breaches

LinkedIn Data Breach

LinkedIn's data breach history reflects two distinct security eras. First, there's the…
Anatomy of a Healthcare Data Breach

Twitter Data Breaches

Twitter – now X – is a massive, public-facing platform with hundreds…
Anatomy of a Healthcare Data Breach

Cam4 Data Breach

Cam4 is a high-traffic adult live-streaming platform with millions of performers and…
Third Party Risk Management (TPRM)

What is Third Party Risk Management (TPRM)?

Third-Party Risk Management (TPRM) is the process of managing risks with third…
NIST Cybersecurity Framework

Top NIST Best Practices for Enhancing Cyber Resilience…

Cyber resilience is no longer just a goal; it’s a necessity. As…
Third-Party Cloud Security

Navigating EU’s MiFID II: A Third-Party Risk Management…

MiFID II third-party risk management isn't optional anymore. As investment firms lean…
Building a Cybersecurity Culture for Your Third Party Vendors

From Global Regulatory Chaos to Clarity: Scalable TPRM…

In a world where businesses operate across borders, third-party risk management (TPRM)…
Vendor Due Diligence Checklist

Navigating DORA, NIS2, and GDPR Through Centralized Third-Party…

Compliance isn’t just about internal controls anymore. As regulations such as DORA,…
DORA

DORA Vendor Risk Management: What Financial Institutions Need…

The EU’s Digital Operational Resilience Act (DORA) is changing the way financial…
Vendor Risk Management

What is the CIA Triad? Applying It in…

When most people hear the three letters CIA in succession, they think…
DORA

Is Your DORA Strategy Ready for 2026?

Key Steps for ROI Submissions and Compliance DORA’s Register of Information (ROI)…

The Fastest and Easiest Way
to Do Business Together, Securely