Supplier Security: Who Can Access Your Business?

IT providers, software partners, contractors and consultants all end up with access to keep things running. Then projects end, people move on, and nobody revisits the permissions.

Secarma cover identifying who has access to which systems and data, what that access actually allows, and which connections deserve closer attention. There's specific coverage of shared accounts, privileged access and remote support tools, which is where most of the risk concentrates.

The governance half is about clarifying who approves, reviews and removes supplier access, what to ask suppliers about their own security and incident responsibilities, and handling access when a contract ends or their staff change. As with their November session, there's a seasonal angle: holiday support cover, emergency contacts and temporary access while your team is off.

I've been to enough Secarma webinars to say they're reliably worth the hour, and they don't turn into a pitch.