Ponemon 2022 Study: Data Risk in the Third-Party Ecosystem

Sponsored by RiskRecon, a Mastercard Company, and conducted by Ponemon Institute, this new report surveyed over 1,000 IT and IT security professionals familiar with their organizations’ approach to managing third-party data risk to understand how companies are doing when it comes to detecting, mitigating and minimizing risks associated with third parties and Nth parties.

Our study found a number of interesting data points, including:

• Only 34% of respondents say that they have confidence that a primary third party would notify their partners of a data breach
• 43% of respondents said their organizations’ third-party management policies and
  programs are frequently reviewed
• More than half of respondents say they are relying upon the third party to notify their organization when data is shared with Nth parties.