Should You Fire a Vendor After a Breach? A CISSP Blueprint Scenario

👉 IT & cybersecurity career guidance: https://professorsimon.com/guidance ---------------------------------------------------- Your vendor just called about a possible breach on their side. If your first instinct is to terminate the contract immediately, Professor Simon slows that down and walks through how a CISSP should actually reason through it, using a scenario from his own CISSP Blueprint book. What you'll learn: • Why the instinct to immediately terminate a vendor after a possible breach often isn't the strongest answer • How CISSP scenario questions test proportionate judgment, not vocabulary • Where third-party risk fits in the current exam outline as Supply Chain Risk Management (SCRM), Domain 1 • The difference between due diligence and due care, and why a program needs both • The four standard risk-response options: mitigation, avoidance, transfer, and acceptance, and what each one actually does (and doesn't do) • Why your own regulatory obligations don't pause while a vendor finishes investigating • A repeatable four-step framework for working through this kind of scenario question, on the exam or on the job 📚 Companion resource: download the free "Vendor Breach: What Would You Do?" workbook (Part 2: CISSP Blueprint Exercise) at https://professorsimon.com/free-guides. No email required. CHAPTERS 0:00 A Vendor Just Called With a Possible Breach 1:30 ISC2, SCRM, and Where This Fits the Exam Outline 2:57 Terminate or Stay Engaged? Weighing the Costs 3:58 Due Diligence vs. Due Care 4:58 Your Regulatory Obligations Don't Pause 5:47 The Four Risk-Response Options 7:35 A Real-World Example: EU DORA 8:13 A Repeatable Four-Step Framework 📝 Companion Blog Post: https://professorsimon.com/blog/cissp... 🎧 Listen to the Podcast on Spotify: https://professorsimon.com/podcast 🧭 Figure out which path fits you with CareerVectors: https://careervectors.com 🔗 Resources, blog & more: https://professorsimon.com/links 💼 LinkedIn:   / leonardsimon   📸 IG / 🐦 X / 🎵 TikTok: @profsimononline #Cybersecurity #CISSP #ThirdPartyRisk