Bridging the Gap Between Physical and Cybersecurity Through Third Party Risk Management (TPRM) and Governance, Risk and Compliance (GRC)
Year: 2025
Type: article
Abstract: The world is connected by Internet of things (IoT) and the lines between cybersecurity and physical security are becoming blurred. One directly impacts the operations of other domain. However, organizations fail to bridge the gap between these two domains, creating a weak defense posture and high risk of cyber-attacks. In this study we are highlighting the need for a more combined approach to security, using third party risk management (TPRM) and Governance, Risk and Compliance (GRC) frameworks. These frameworks play an important role in managing risks that arise from venders, who often act as a channel between cyber and physical vulnerabilities. By gaining a hold on GRC platforms, management of security policies can be managed, compliance tracking and improving the collaboration between physical and IT teams. This approach enables organizations to create a more robust security infrastructure, able to tackle modern threats in a cohesive and risk conscious manner.
Author: Aditya Rathore
Institution: Rashtriya Raksha University
Language: English
Subfield: Information Systems
Field: Computer Science
Domain: Physical Sciences
Open Access status: hybrid
OpenAlex ID: W4409893971