TPRM Lifecycle
Originally with around 350 questions, this is the questionnaire used conduct vendor due diligence
What is ConQ?
This is our primary contact for TCCL related changes
Who is Parthiv Dalal?
This is our newest Team Ross member.
Who is Tala Kseibi?
These are the formal policies and standards that govern information security practices across AT&T, ensuring compliance and protection of data and systems.
What is ASPS?
Scarlet, Crimson, and Vermillion are all shades of this primary color
What is red?
These are the five phases of the lifecycle
What are:
Vendor Selection and Due Diligence
Contracting
Onboarding
Ongoing Monitoring
Offboarding/Termination
These are the approximate number of controls that Yi has to consider on a daily basis (number of controls under Cyber Security Management)
This Team Ross member is Puerto-Rican Italian
Who is Nia Luckey?
Under Rich Baich, this important person has a rather different title than Vice President, Expert, or Director.
Who is Jason Hamilton (Deputy CISO)
A green light shines for Daisy in this novel-turned-movie set in the 1920s.
What is the Great Gatsby?
Even though many suppliers would like to go through negotiations on the terms of it, this clause is frequently non-negotiatiable to include
What is SISR?
Rather than coexist with our sister team (Cyber Security Management) in the L1 Technology Management, this is the actual L1 for Third Party Management
What is Process and Service Delivery?
Only one cup of coffee a day for this Team Ross member, but decafs don't count
Who is Yi Liu?
P2B and P2O are designed to integrate seamlessly with existing development workflows and complement this central entry point.
What is the ATS Unified Front Door?
This major competitor of OpenAI is currently a privately owned company, but plans to make its public debut soon
What is Anthropic?
Closely related to the TPRM lifecycle, this adjacent lifecycle refers to the management of broader supplier relationships.
This could either refer to an L3 control OR a control domain!
What is Identity and Access Management?
Are you traveling to the Maldives or the Middle East? Doesn't matter, ask this Team Ross member for advice
Who is Zak Melhem?
Used by AT&T, this requires users to verify their identity using two or more factors to securely access company applications
What is Microsoft Entra ID?
Apart from the Sun, this is the closest star to us
What is Proxima Centauri?
Supplier data is displayed on the supplier inventory dashboard, but this is the larger source of all of supply chain's data
What is DNA?
What is CCF Not Applicable?
Follow the PER process and do not contact these two if your problem is an individual security vulnerability
Who are Ariel Allensworth and Elzar Camper?
This tool/process aims to reduce/eliminate the risk to AT&T caused by end users accidentally or maliciously sharing sensitive or critical AT&T Information.
What is Data Leakage Prevention (DLP)?
Amharic is the official language of this country
What is Ethiopia?