MONITORING + AI

Summary from the TLDR InfoSec newsletter

The typical vendor risk review is a series of questionnaires sent back and forth between buyers and vendors, and does little to actually improve security. Generic Trust Centers are not much better.