May 20, 2024

Information Security Investments: How to Prioritize?

View Full Paper

Ask AI

Bookmark

Authors

Discussion

Qualitative analysis reveals core assessment priorities across corporate supply chains, highlighting focus areas for targeted security investment.

Information security risk assessments prioritize policy existence, incident prevention plans, regulatory compliance, and data protection across third-party networks.
Qualitative analysis of 5 third-party assessment forms using Atlas TI revealed that financial sector questionnaires contain the highest number of supplier questions.
Highlights how aligning defensive investments with partner compliance demands allows resource-constrained vendors to strengthen targeted supplier management controls.

Oliveira et al. (2024) studied this question.

View Full Paper

Ask AI

Bookmark

Qualitative analysis reveals core assessment priorities across corporate supply chains, highlighting focus areas for targeted security investment.