Contract Management

First, I want to provide a disclaimer that I’m not a legal expert and it is important you collaborate with your legal teams on any contracts or contractual language with your vendors. The information provided here is based on my experience; every organization will have different contract requirements or needs. This section will be somewhat high-level and mere guidance as part of a cybersecurity role and what can be expected as it relates to contracts with your vendors. Whether you like it or not, you will need to be involved with contracts to ensure the cybersecurity language is not overlooked and that any proposed changes from the vendor are acceptable. With that, you will need to understand the different types of contracts and have some basic knowledge of what should be included within the contracts, specifically as it relates to the technology and cybersecurity requirements.

As we covered as part of the cybersecurity Vendor Risk Management process...