Bridging the Gap Between Physical and Cybersecurity Through Third Party Risk Management (TPRM) and Governance, Risk and Compliance (GRC)

The world is connected by Internet of things (IoT) and the lines between cybersecurity and physical security are becoming blurred. One directly impacts the operations of other domain. However, organizations fail to bridge the gap between these two domains, creating a weak defense posture and high risk of cyber-attacks. In this study we are highlighting the need for a more combined approach to security, using third party risk management (TPRM) and Governance, Risk and Compliance (GRC) frameworks. These frameworks play an important role in managing risks that arise from venders, who often act as a channel between cyber and physical vulnerabilities. By gaining a hold on GRC platforms, management of security policies can be managed, compliance tracking and improving the collaboration between physical and IT teams. This approach enables organizations to create a more robust security infrastructure, able to tackle modern threats in a cohesive and risk conscious manner.