“I want your original audit report pre-remediation… I want to see the vulnerabilities you found and how you remediated them.”
The GRC Engineering Club's AntiCheckBox Podcast · GRC Is Broken. The Buyer Is The Bigger Problem | Guest: Jake Bernardes
Play from 20:04
20:04
Audio streams from the publisher’s own feed. Verbatim does not host or copy it.
What was described
For each of the assessed vendors, request the original audit report pre-remediation, the list of gaps, remediation tickets, app-set program for the last three months, and vulnerability/pen-test findings
Said nearby on the same subject
“Within nine months, Lambda has to complete an audit of their Export Controls Compliance Program utilizing the exact BIS sample audit module... they have to prove IP blocking, geofencing, and verification of access information.”
♫
Said on Trade Compliance Brief - Export Control and Sanctions Insights
“Our listing activity this time versus last year is 30% down. And that's because vendors are applying discretion and saying, hell no, I'm not doing that.”
♫
Said on The Property Trio (formerly The Property Planner, Buyer and Professor)