Tag: third-party risk management

News and information from the Advent IM team.

Third-Party Risk: When Ransomware Walks in Through the Side Door

The Collins Aerospace incident is another reminder that third-party risk is no longer an abstract concept; it is one of the most common ways attackers get inside. In this case, the compromise wasn’t a direct assault on an enterprise perimeter but a ransomware attack that entered via the supply chain. Not only was data disrupted, […]

Read More

The Human Factor in 2025: What Social Engineering Means for GRC, Risk and Resilience

Governance, risk and compliance (GRC) professionals have long argued that security is not just a technical discipline but a human one. Proofpoint’s Human Factor 2025 report confirms this view with unsettling clarity: the most dangerous attack vector in today’s threat landscape isn’t a piece of malware or a zero-day exploit. It’s us. Social engineering as […]

Read More