Panorays’ Blog

Articles by Dov Goldman

Learn about the latest research and happenings in TPCRM
Dov Goldman - VP of Risk Strategy @ Panorays
Dov Goldman
VP of Risk Strategy @ Panorays
Dov is a serial entrepreneur who’s been involved with third-party programs of all sizes, and is the go-to person for explaining the difference between inherent and residual risk.

Expertise

Dov is a seasoned entrepreneur, navigating the world of startups with finesse. With a knack for breaking down the nuances of third-party risk management, he’s your ultimate guide in explaining inherent versus residual risk. Armed with years of expertise, Dov will untangle the intricacies of risk assessment and demystify the complexities of third-party risk.

Experience

Throughout his extensive career as a technology entrepreneur, Dov has emphasized the human dimension of implementing IT systems and the pragmatic necessity of delivering tangible business outcomes. With decades of experience spanning multiple startups, Dov has collaborated closely with cyber and risk leaders across numerous large enterprises, specializing in third-party risk management.

Cybersecurity Authoritativeness

Dov has earned recognition as a thought leader, adept at simplifying intricate problems and their resolutions into easily understandable terms. Regarded as the ‘third-party therapist’ within the industry, Dov possesses an intuitive understanding of the challenges faced by third-party risk leaders. His engaging speaking engagements and insightful written pieces captivate audiences, blending entertainment with informative content.

Dov has written and been quoted about third party cyber risk and privacy in various papers, cybersecurity news publications, websites and resources, including:

Dov has spoken at and chaired numerous industry events, including recently:

Dov has a number of patents to his name, including one for the design of a third-party cyber risk module:

Education

Dov graduated from Columbia University in New York with a degree in Computer Sciences. His time there was more than just academics—it was a transformative period where he honed his skills and immersed himself in tech competitions and workshops. Columbia equipped him not only with technical expertise but also instilled in him a relentless drive for excellence that defines his career.

Latests Posts by Dov Goldman

Vendor Due Diligence Checklist

SOC Reports as a Due Diligence Tool: Best…

Every organization today relies on outside vendors, whether it’s for cloud storage,…
Third-Party Risk Management

FISMA vs. FedRAMP: What’s the Difference?

Cybersecurity is a top priority for U.S. federal agencies, especially as threats…
Third-Party Cyber Risk Management

What the SHIELD Act Means for Vendor Compliance…

The New York SHIELD Act, or Stop Hacks and Improve Electronic Data…
What is an Attack Vector?

Security vs. Compliance: Why Meeting Standards Doesn’t Mean…

“We passed the audit, so we must be secure.” It’s a common…
Why You Need a System Security Plan for TPRM

Common Gaps in the TPRM Lifecycle and How…

The Third-Party Risk Management (TPRM) lifecycle is a structured process for identifying,…
Vendor Risk Assessment

Why Vendors Fail Audits and What That Means…

As vendor ecosystems grow more complex, audits have become a critical checkpoint…
The ROI of Implementing Risk Assessment Tools

Top 10 Supply Chain Regulatory Compliance Risks –…

Modern supply chains are more interconnected than ever, and with that complexity…
Supplier Cyber Risk

How to Build an Effective Supplier Risk Assessment…

Supplier risk has become one of the top challenges for security, procurement,…
Security Risk Assessment

How to Choose the Right Vendor Credibility Assessment…

Vendor credibility assessment tools help organizations evaluate the reliability and risk levels…
Achieve DORA Compliance While Managing Third-Party Risks

Breaking Down the Five Pillars of DORA Compliance…

The Digital Operational Resilience Act (DORA) has reshaped how financial institutions and…
DORA

How to Choose the Right DORA Solution for…

The Digital Operational Resilience Act (DORA) is more than just another regulatory…
Achieve DORA Compliance While Managing Third-Party Risks

Creating Effective ICT Exit Strategies to Meet DORA…

When critical services are outsourced to third-party ICT providers, the benefits often…
DORA

Vulnerability Management and DORA Compliance

In today’s evolving threat landscape, even a single unpatched vulnerability can leave…
Waht is Cybersecurity Questionnaire

What is a Cybersecurity Questionnaire?

The Okta and MOVEit supply chain attacks highlighted the challenge vendors face…
Security Questionnaires

Top Questions to Include in Your DORA Questionnaire

Ensuring compliance with the Digital Operational Resilience Act (DORA) is a top…

The Fastest and Easiest Way
to Do Business Together, Securely