Third parties
A third party is any organisation you share data with, or that your business relies on for a service.
Why Oko watches them
Section titled “Why Oko watches them”An incident at a third party can affect you before they tell you about it. Rivanorth Oko tracks each third party you list and tells you when a finding about them concerns you.
What you see
Section titled “What you see”Third Parties lists each organisation with four columns:
- Business Criticality: how critical that organisation is to your business. You set this.
- Data Sensitivity: how sensitive the data you share with them is. You set this too.
- Threat Score: a number out of 100, set by Rivanorth. It takes into account the organisation’s past breaches and how recent they are, the kind of data involved, ransomware incidents, dark web mentions, the organisation’s industry and size, and the type of relationship you have with them.
- Overall Risk: Critical, High, Medium or Low. It combines the other three.
If third-party monitoring is not part of your plan yet, the page tells you how to request it.
What you can do
Section titled “What you can do”- Use Edit on a row to set Business Criticality and Data Sensitivity.
- Use Delete to remove a third party you no longer work with.
- Filter the list by any of the four columns.
Adding a third party
Section titled “Adding a third party”- Open Support.
- Choose Add Third Party.
- Give the organisation’s name and website.
Rivanorth adds them and confirms. Self-service adding is on the roadmap.
What you never see
Section titled “What you never see”You see the risk a third party poses to you, never their data. The data boundary explains where the line sits, in both directions.