How to Build a Vendor Incident Response Plan (That Works Under Pressure)
A vendor emails: “We’re investigating a possible cybersecurity incident, potentially a supply chain attack.” It’s 4:47 pm. Your intake queue is full, a filing deadline is tomorrow, and staff are already forwarding screenshots to each other. Someone asks, “Who’s supposed to call the vendor?” Another asks, “Do we have to tell funders?” Nobody’s being careless, […]
How to Build a Vendor Incident Response Plan (That Works Under Pressure) Read More »




