Hotman Group Perspectives

Third-Party Risk

Practical guidance on managing cybersecurity risk across vendors, suppliers, and other third parties without creating an overly complex or burdensome program.

The Danger of the Perfect Audit
A perfect audit report can create a dangerous false sense of security. The Hotman Group team explains how to evaluate scope, evidence, control testing, automation, and risk before relying on a compliance report.
Real-Life GRC Horror Stories: What Checkbox Compliance Can Cost You
Real-life GRC failures often begin with shortcuts: overreliance on tools, weak ownership, under-resourcing, poor third-party oversight, cheap audits, and treating compliance as the finish line. Cheri Hotman and Tanya Wade explain what organizations can learn from these GRC horror stories.
Building Customer Trust in the Digital Age: Why Security and Compliance Drive Revenue
Customer trust is no longer built only through brand reputation, relationships, or a good product. Increasingly, customers want evidence that the organizations they work with can protect data, manage cybersecurity risk, meet compliance obligations, respond to incidents, support accessibility, govern emerging technologies, and operate responsibly. In this Hotman Group session, Cheri Hotman and Sarah discuss […]
Security Questionnaires: Why You Can’t Just Blame the Intern
Security questionnaires can affect customer trust, sales, contracts, and risk decisions. Cheri Hotman and Caroline McCaffery explain how organizations can improve accuracy, reduce questionnaire fatigue, use automation responsibly, maintain a system of record, and build a scalable customer-assurance process.