This CLE will examine the business, security, and legal issues related to using third-party vendors.
An organization’s information security activities should begin before it undertakes transactions as vendor or purchaser. Cybersecurity strategy should be informed by laws and regulations – federal, state, local, and international (at national, regional, provincial, and local levels) – to which the organization is subject. From the purchaser’s perspective, vendor selection should also be informed by the purchaser’s specific requirements and expectations regarding the information and information systems relevant to the vendor relationship.
Panelists will discuss procuring organizations, vendors, and their respective counsel to address information security requirements in their transactions. They will frame the issues parties should consider consistent with common principles for managing cybersecurity risk. Parties should also contemplate transactions from due diligence and vendor selection through contracting and vendor management. Cybersecurity provisions are not “one-size-fits-all,” but should instead be informed by parties’ assessment of risk and strategies to mitigate risk.
Topics that will be discussed:
1. Strategies on how to evaluate vendors
2. Legal concepts related to liability for vendor data breaches
3. Language to consider using when drafting vendor contracts
4. Strategies and techniques to utilize to demonstrate compliance with new regulatory requirements.
This course is brought to you by the Global Cyber Institute and Thomson Reuters. It is taught by Daniel Garrie, Law and Forensics, David Cass, IBM, Steven Chabinsky, White & Case LLP, and Chrisopher Burgess, Securely Travel.
If you intend to take a course for CLE credit, please make sure your state is listed in the "Accreditation" section to the upper right of the program description. Accreditation displayed is unique to the purchased program format (live conference, live webcast, on demand, podcast). Credit totals listed for live conferences are the maximum credits available. Credits issued will be based upon actual time in attendance. Credit totals for other formats are for complete programs. Partial credit is not available for any online or downloadable format.
West LegalEdcenter will not provide accreditation for states not listed.
This product is intended for individual use by the named purchaser. Group viewings for online programs may be arranged for five or more attorneys within the same organization prior to viewing by emailing west.wlec-sales@thomson.com.