noah mchugh cybersecurity leader. ciso & consultant. cissp, cism.

noah@earth:~$ cat ~/writing/006-vendor-90-days.md_

006 — LEADERSHIP

YOUR VENDOR SECURITY PROGRAM IN 90 DAYS

Day 1 to 30: inventory. You can't assess vendors you don't know you have. Shadow IT is usually a spreadsheet finance never told you about.

Day 31 to 60: tier them. Five vendors matter enormously, fifty matter somewhat, the rest get the standard questionnaire and a prayer. Day 61 to 90: put the top five on a review cadence and automate the rest.

[SAMPLE BODY — replace with the real essay.]

← all writing