To compete successfully in a global marketplace, enterprises increasingly are moving their business processes and other services to the cloud and outside suppliers. This trend has created many more attack surfaces for cyber-criminals. Enterprises should learn how to reduce the risk of network breaches and cyber-attacks that posed by the poor security practices of third parties such as suppliers and service providers.