Getting a Tighter Grip on Supply Chain Security Risk – Source: www.proofpoint.com

3rd Party Risk Management
,
Events
,
Governance & Risk Management

Proofpoint CEO Ashan Willy on Ways to Identify Third-Party Compromises

Michael Novinson (MichaelNovinson) •
May 7, 2023    

Some of the most sophisticated cyberattacks are being targeted at third-party suppliers in an effort to affect their critical clients, said Ashan Willy, CEO of Proofpoint. But often client organizations affected by these attacks do not even realize a key supplier has been hit, he added.

See Also: OnDemand | Attack Surface Management 2.0: Leveraging Vulnerability Analytics & Threat Intelligence

“It’s not easy for large companies to know all their suppliers. Some of them have 20,000 or 40,000 suppliers,” he said. Through the use of machine learning and other tools, including analysis of invoices and communications, “we can figure out in real time who their suppliers are,” he said.

In this video interview with Information Security Media Group at RSA Conference 2023, Willy discusses:

• How email security helps detect third-party compromises;
• Other security challenges involving third-party suppliers and partners;
• Common attack progression patterns.

Willy directs a global workforce of over 4,000 employees focused on defending customers from advanced threats and compliance risks by protecting their people – and in turn, safeguarding their data, business and reputation. Willy has over 25 years of leadership experience in engineering, product management, worldwide strategy and planning across global markets.