On Demand Audio

Third-Party Risk Management for Attorneys

(124 reviews)

Produced on August 25, 2020

Taught by
$ 89 Privacy & Cybersecurity In Stock
Get started now

$299 / year - Access to this Course and 1,500+ Lawline courses

or

Course Information

Time 1h 1m
Difficulty Intermediate
Topics covered in this course: Privacy & Cybersecurity

Course Description

Attackers in numerous high profile (and not so high profile) data breaches and other security incidents often compromise and use third-party vendors to attack their real intended targets: organizations just like yours. Realistically, modern business requires working with third-party vendors. As attackers increasingly leverage those vendors to strike at the organizations they work with, it’s essential to take reasonable steps to recognize and mitigate the potential risks involved.

Attorney & security consultant Scott Aurnou will discuss the nature of third-party risk, typical threats that your firm may encounter, fundamental steps to develop an effective third-party risk management program, and the essential part that attorneys play in mitigating third-party risk.



Learning Objectives:

  1. Discuss the essential nature of third-party risk
  2. Review typical threats and measures are taken to mitigate third-party risk
  3. Identify essential steps needed to create an effective vendor risk management program
  4. Assess the crucial role that attorneys play in mitigating third-party risk 

Credit Information

After completing this course, Lawline will report your attendance information to {{ accredMasterState.state.name }}. Please ensure your license number is filled out in your profile to ensure timely reporting. For more information, see our {{ accredMasterState.state.name }} CLE Requirements page . After completing this course, {{ accredMasterState.state.name }} attorneys self-report their attendance and CLE compliance. For more information on how to report your CLE courses, see our {{ accredMasterState.state.name }} CLE Requirements FAQ .

Faculty

Scott Aurnou

The Security Advocate

Scott Aurnou, Esq., CISSP is an attorney and founder of The Security Advocate, which helps organizations with information security and data privacy issues. This includes privacy and security awareness training, security consulting, compliance with cyber security and privacy laws and related legal concerns.

Scott spent over a decade as a litigation attorney in the NYC area, and served as lead counsel for a private client services group at Smith Barney. He uses his legal, security, and business background to make complex information security concepts easy to understand (and even entertaining on occasion) for non-technical audiences. He has published security related articles in national publications ranging from the New York Law Journal to SC Magazine. In addition, he has created and delivered numerous presentations on information security and data privacy issues for executives, managers, and professionals.

Scott is a Certified Information Systems Security Professional (CISSP), Certified Information Privacy Technologist (CIPT), Certified Information Privacy Professional (CIPP/US) and a Fellow of Information Privacy (FIP). He is admitted to practice law in New York, Colorado, the U.S. District Courts for the Eastern and Southern Districts of New York; as well as the U.S. Court of Appeals for the Second Circuit. He is also the author of the Introduction to Information Security LiveLessons video training series for Pearson Publishing. 



Reviews

TD
Tom D.

Great overview!

GD
Gary C. D.

closed captioning was very helpful, it should be available on all courses

AR
Alicia R.

Professional and informative.

AK
Angela K.

practical useful information.

Load More