Service Provider Security: CIS Control 15 Framework

Organizations rely heavily on external service providers, but third-party vendors often introduce significant security vulnerabilities. Managing these relationships is critical to protecting sensitive data and maintaining compliance. This text-based course guides you through establishing a robust vendor risk management program based on CIS Critical Security Control 15. You will learn how to identify, evaluate, and continuously monitor service providers to minimize supply chain risks.\n\nWhat you'll learn:\n- Understand the core principles of CIS Control 15 and why third-party security matters\n- Develop an inventory of service providers classified by data sensitivity and risk\n- Assess vendor security policies and establish clear contractual security requirements\n- Apply zero-trust principles when granting access to external service providers\n- Monitor third-party compliance continuously and manage vendor offboarding securely\n\nYou will start with foundational concepts of supply chain risk management and the structure of CIS Control 15. From there, you will progress through practical methodologies for assessing vendors, drafting security agreements, and implementing ongoing monitoring.\n\nThis course is designed for IT professionals, security coordinators, and business administrators who are new to vendor risk management and want a structured, step-by-step approach. No prior cybersecurity experience is required.\n\nStart reading today to build a secure and resilient service provider management program.