To protect sensitive data from contractors and privileged vendors, organizations should take proactive steps: monitor all data silos with audit and security tools, automate discovery and apply default policies to new sensitive data, and require contractors to acknowledge and comply with all relevant security regulations. Conduct cybersecurity audits on vendors regularly, ensure they carry proper cyber liability insurance, and establish internal processes for onboarding, monitoring, and offboarding. Lastly, update your incident response plan to address breaches linked to third-party actions or negligence.

Join for free to read