https://thirdpartycurrent.com/2026-07-18T15:00:00.000Zhttps://thirdpartycurrent.com/news/upguard-adds-fourth-party-api-and-remediation-controls/2026-07-18T15:00:00.000Z2026-07-15T18:00:00.000ZThird Party Current Research Desk

API availability and questionnaire-remediation changes suggest that downstream visibility is being judged less as a map and more as data that must enter governed work.

https://thirdpartycurrent.com/news/iso-27036-enters-systematic-review/2026-07-19T15:00:00.000Z2026-07-15T12:00:00.000ZThird Party Current Research Desk

ISO/IEC 27036-1 remains the published supplier-relationship standard while its 2026 review determines whether the current edition should be confirmed, revised, or withdrawn.

https://thirdpartycurrent.com/news/nist-finalizes-c-scrm-due-diligence-guide/2026-07-18T15:00:00.000Z2026-07-08T15:00:00.000ZThird Party Current Research Desk

The finalized C-SCRM quick-start guide gives organizations a clearer floor for evaluating technology suppliers before risk teams build a larger program around it.

https://thirdpartycurrent.com/news/upguard-higher-education-vendor-breach-study/2026-07-18T15:00:00.000Z2026-07-01T13:00:00.000ZThird Party Current Research Desk

The vendor-funded analysis shows the value—and the limits—of using relationship-scale datasets to understand concentration and downstream cyber exposure.

https://thirdpartycurrent.com/news/apra-cps-230-enters-force/2026-07-19T15:00:00.000Z2026-07-01T12:00:00.000ZThird Party Current Research Desk

APRA's operational-risk standard now requires regulated entities to connect material service-provider oversight with critical operations, formal agreements, monitoring, and continuity planning.

https://thirdpartycurrent.com/news/nist-sp-800-18r2-integrates-supply-chain-planning/2026-07-18T15:00:00.000Z2026-06-30T16:00:00.000ZThird Party Current Research Desk

SP 800-18 Revision 2 treats cybersecurity supply-chain risk planning as part of the broader system risk record, raising the importance of traceable ownership and evidence.

https://thirdpartycurrent.com/news/onetrust-klue-salesforce-incident-third-party-oauth/2026-07-18T15:00:00.000Z2026-06-24T19:00:00.000ZThird Party Current Research Desk

A compromised third-party integration involving Klue and Salesforce shows why application connections need their own inventory, ownership, and revocation playbook.

https://thirdpartycurrent.com/news/securityscorecard-acquires-driftnet/2026-07-18T15:00:00.000Z2026-05-14T14:00:00.000ZThird Party Current Research Desk

The acquisition extends a broader contest over who can map external assets, dependencies, and threat signals into a third-party decision workflow.

https://thirdpartycurrent.com/news/apra-finalizes-cps-230-amendments/2026-07-19T15:00:00.000Z2026-04-30T12:00:00.000ZThird Party Current Research Desk

The April package adds limited contractual exemptions, clarifies their management, and updates the material service-provider register ahead of the July commencement date.

https://thirdpartycurrent.com/news/sayari-source-intelligence-integration/2026-07-19T15:00:00.000Z2026-04-20T12:00:00.000ZThird Party Current Research Desk

The announced integration joins corporate ownership and trade intelligence with component- and material-level sourcing data, pushing third-party analysis deeper into product-specific exposure.

https://thirdpartycurrent.com/news/pra-finalizes-third-party-reporting-policy/2026-07-19T15:00:00.000Z2026-03-18T12:00:00.000ZThird Party Current Research Desk

The UK policy expands reporting beyond outsourcing, separates notification from register templates, and gives firms a year to govern the data behind material third-party arrangements.

https://thirdpartycurrent.com/news/processunity-launches-risk-index/2026-07-18T15:00:00.000Z2026-03-12T14:00:00.000ZThird Party Current Research Desk

The new rating approach reflects a market shift toward combining external signals with evidence from the organization's own assessment and control process.

https://thirdpartycurrent.com/news/processunity-ponemon-assessment-maturity-study/2026-07-18T15:00:00.000Z2026-01-27T15:00:00.000ZThird Party Current Research Desk

ProcessUnity and Ponemon Institute report a gap between incident volume and assessment response, but buyers should separate the study's directional signal from a universal benchmark.

https://thirdpartycurrent.com/news/censinet-launches-2026-healthcare-benchmark-study/2026-07-19T15:00:00.000Z2025-09-09T12:00:00.000ZThird Party Current Research Desk

The 2026 study brings healthcare organizations, industry groups, and several control frameworks into one benchmarking program, creating useful peer context with important participation limits.

https://thirdpartycurrent.com/news/corl-riskrecon-healthcare-partnership/2026-07-19T15:00:00.000Z2025-08-20T12:00:00.000ZThird Party Current Research Desk

The partnership combines outside-in cyber signals with healthcare-specific assessment and advisory work, illustrating how managed TPRM providers are packaging intelligence into response workflows.

https://thirdpartycurrent.com/news/sayari-acquires-mirato/2026-07-19T15:00:00.000Z2025-07-28T12:00:00.000ZThird Party Current Research Desk

The Mirato deal connects corporate and trade data with AI-assisted assessment workflow, creating a broader risk-intelligence operating model whose post-acquisition packaging still requires scrutiny.