1
THIRD-PARTY
RISK MANAGEMENT
For your website
Protect your most valuable asset - your web presence
Idan Cohen, Q3 2019
THIRD-PARTY RISK MANAGEMENT For your website Protect your most - - PowerPoint PPT Presentation
1 THIRD-PARTY RISK MANAGEMENT For your website Protect your most valuable asset - your web presence Idan Cohen, Q3 2019 The untold supply-chain challenge: THIRD-PARTIES ON WEBSITES 3 Let s understand What is a web third-party
1
For your website
Protect your most valuable asset - your web presence
Idan Cohen, Q3 2019
3
Integrated into your website Controlled Remotely All on client's side
Third-parties are added to sites to improve technological functionality and business scalability. Third parties are installed on your website from external sources uncontrolled.
An installed third-party
and at the client side.
Let’s understand
4
You can’t ignore it anymore. The demand for third-party solutions is rising high, and for a good reason. With features like accessibility, live-chats, comments, reviews, personalization and localization are a most today.
The growing number of
15 37 60 85 40 80 2015 2016 2017 2018
Source: Yottaa 2018
5
my heritage
Threats of third-parties
Supply chain attacks No control over your vendors’ errors
7
Scope 380K Credit card details Cause
MageCart gang
Result
£1 Billion cost
British Airways
September 2018
Ticketmaster
April 2018
May 2019
Third-Party Breach Examples
Scope 40k Client records Cause
Hacked vendor
Result
~$1M lost
Scope 17,000 Websites Cause
Bug Misconfig
Result
8
What are the
Brand reputation damages Sensitive data leakage Privacy breaches Accountability Financial losses
10
We are a cyber security company that helps businesses mitigate security and privacy risks resulting from third-party technologies installed on their websites
Meet
11
reflectiz is an Israeli cyber-security company founded in 2016 by an experienced team of professionals, combining in depth development expertise with unique cyber and hacking skills and knowhow.
Trusted by About Us
Marius Nacht,
Co-Founder & Chairman, CheckPoint. Anchor Investor at aMoon Fund
Israel Innovation Authority,
granted reflectiz special funding, awarding us for our unique innovative technology.
12
Our proprietary technology is based on complex algorithms, cyber expertise and advances machine learning capabilities. This is how it works behind the scenes
The reflectiz
An ongoing website scan cycle
SCAN
INSPECT ANALYZE SIMPLIFY SCAN Automated remote scan for an entire website INSPECT In-depth page analysis performed by designated browser SIMPLIFY Producing filtered results and actionable items ANALYZE Data analysis and cyber algorithmics procedures
17
Reoccurring analysis for billions of records Baseline creation and change management Threat detection on soft real-time Multiple vendor code modification tracking
18
Visibility Risk Mapping Alerts
Full third party Asset Management (Baseline) To each and every 3rd party component and vendor Active alerts on important threats and risks
Dashboards
An easy to use and friendly user interface
19
20
So… What do you
We will add your domains Alerts and notifications are sent automatically Keep your website under your control
21
Let’s schedule a demo
Idan Cohen, CEO idan@reflectiz.com +972-504408499