topic Re: JPMC's CISO open letter to Third-Party suppliers in Threats

JPMC's CISO open letter to Third-Party suppliers

akkem — Mon, 28 Apr 2025 19:27:54 GMT

JPMC's CISO posted an open letter, while they are always areas of focus, expect questions to be raised around: stolen authentication tokens, software gaining privileged access without consent, and hidden fourth-party dependencies

Software providers must prioritize security over rushing features. Comprehensive security should be built in or enabled by default.
We must modernize security architecture to optimize SaaS integration and minimize risk.
Security practitioners must work collaboratively to prevent the abuse of interconnected systems.

https://www.jpmorgan.com/technology/technology-blog/open-letter-to-our-suppliers

Re: JPMC's CISO open letter to Third-Party suppliers

mvl — Fri, 02 May 2025 13:02:59 GMT

With rapid changes in IT and cloud environments, a shift-left approach is essential to embed security early in the development lifecycle and address risks proactively.

Re: JPMC's CISO open letter to Third-Party suppliers

unknownop00 — Sun, 11 May 2025 08:00:28 GMT

De open brief van JPMC’s CISO aan third-party leveranciers benadrukt één ding: veiligheid en betrouwbaarheid zijn geen luxe, maar noodzaak. Dat geldt ook voor je website. Als je een website laat maken bij SuccesvolWebdesign.nl, zorgen we voor een veilige, Webdesign bureau stabiele en professionele online omgeving die voldoet aan de eisen van vandaag – ook die van jouw klanten.