The Third-Party
Cyber Risk Glossary

Every important term explained: helping security and compliance teams speak the same language.
Data Privacy
Data privacy is about managing personal and sensitive information responsibly. It’s central to third-party risk…
Read more…
Cyber Security Risk Assessment
A cyber security risk assessment is your way of figuring out what could actually go…
Read more…
Key Performance Indicators (KPIs) in TPCRM
Key Performance Indicators (KPIs) in third-party cyber risk management (TPCRM) are measurable metrics used to…
Read more…
NIS2 Directive
The NIS2 Directive is the European Union’s updated Network and Information Security Directive, introduced to…
Read more…
Penetration Testing
Penetration testing, commonly referred to as pen testing, is a simulated cyberattack conducted to identify…
Read more…
Performance Review in TPCRM
A performance review in Third-Party Cyber Risk Management (TPCRM) is the structured evaluation of a…
Read more…
RegTech
RegTech, short for Regulatory Technology, refers to the use of advanced technology solutions to help…
Read more…
Risk Assessment in Third-Party Risk Management
Risk assessment in third-party risk management (TPRM) is the process of identifying, analyzing, and evaluating…
Read more…
Risk Mitigation
Risk mitigation is where risk management gets real. It’s about spotting threats, sizing up their…
Read more…
Software Bill of Materials (SBOM) in TPCRM
In today’s digital ecosystem, the security of the software supply chain is critical to effective…
Read more…
Supply Chain Security
Supply chain security is how you protect the full ecosystem of partners and tech that…
Read more…
Threat Intelligence
Threat intelligence is the practice of collecting and analyzing data about current and emerging cyber…
Read more…