"Everyone Wants to Speak to the CISO" and Other Realities of Addressing Vendor Breaches

Data strategy and privacy attorney Rachel Marmor was quoted in a Cybersecurity Law Report article addressing the risks companies face when they share sensitive data with external vendors, often because of a lack of understanding of how that data is managed within intricate, multi-tiered networks. The article drew on insights from legal and privacy professionals to offer guidance on effective breach communication, notification protocols and essential contract terms. Ms. Marmor highlighted that organizations controlling sensitive information often lack awareness of the networks their data traverses or the level of protection it receives.

"A lot of companies use vendors to process their most sensitive data as well as the non-sensitive data," she explained.

READ: "Everyone Wants to Speak to the CISO" and Other Realities of Addressing Vendor Breaches