The problems we solve: security questionnaires, vendor management, RFPs, RFIs, privacy impact assessments, AI assessments. GenAI & RAG

New York, USA
Joined January 2019
We dropped our latest newsletter, Responsible. Every Tuesday! Subscribe to find out what happens next. clearops.beehiiv.com/p/respo…. .
2
34
You need help with security questionnaires. Not a SOC2 audit.
23
Don't get left behind. Join the movement. #ResponsibleAI
20
Security questionnaire response writing assistant
1
50
Here is our guide on how to write the Gen A.I. policy for your clients. clearops.io/blog/how-to-mana…
34
Ho, Ho, Hold the Holiday Gift Cards on ClearOPS Bridging the Gap between Privacy and Security clearops.substack.com/p/ho-h…
The most backwards practice in cybersecurity is to allow sales to answer secques and not also have them do due diligence on their own vendors for security compliance.
1
“Point-in-time security questionnaires are a legal requirement, not a preventive control. The number of third-party providers can be staggering, with security teams having to assess hundreds of providers,” he said.securityboulevard.com/2022/0…
My 1FA is Probably Better than Your MFA on ClearOPS Bridging the Gap between Privacy and Security clearops.substack.com/p/my-1…
Why ClearOPS Builds Automation Technology for vCISOs on ClearOPS Bridging the Gap between Privacy and Security clearops.substack.com/p/why-…
Replying to @kelleymak
You can't do security alone. That's why you need a #vCISO if you don't have an in-house team.
We have been really focused on #risk #assessments recently. As required by SOC2 and ISO 27001, it forces you to put to paper the logic of your assessment of risks. The hardest part? writing down the risk.
1
Wouldn't it be easier if someone else helped you find them? Can a tool do that? Yes, yes it can.
#infosec vendors please never cold call personal phone numbers - it is a terrible practice. Most #security folks will block the number and may not do business with the vendor. I have posted about this before, but the number of vendor calls have significantly increased.
42
82
22
603
If you fill out a vendor risk questionnaire through a third party, you need to ask for a copy of the completed questionnaire for liability purposes.
1
2
All vendors must be reviewed annually. If you have several hundred vendors, that means you have to review several a day. Make it easy with our automatically generated reports.
2
Replying to @craigzingerline
Clear Operations for Privacy and Security. @_ClearOPS_
1
1
2