Handle a vendor that supports only weaker authentication methods without pretending the risk disappeared.
The inherited weakness A vendor portal that touches contracts and invoices offers only a password plus SMS. The sales and procurement teams both need occasional access this quarter. Weak vendor controls are common. Your job is to contain the risk instead of normalizing it across your own environment. The framework Contain the exception, do not let it write the standard Use the strongest available setup at the weak service, then add compensating controls around scope, ownership, and review. Exceptions should be explicit, narrow, and temporary where possible. A weak vendor login should trigger tighter local controls, not looser organizational habits.…
Sign up free — one personalized lesson every day, matched to your role and goals.
Already have an account? Sign in