The Hitchhiker’s Guide to IT: Vendor Management and Cybersecurity

Cybersecurity has many facets, and not everyone is familiar with the ins and outs of it. What’s more, it may surprise people to learn that much of cybersecurity does not directly involve technology. As tech advances, new ways to address cybersecurity needs with the help of vendor management emerges. How do these advancements come together and help the world of cybersecurity?

On this episode of The Hitchhiker’s Guide to IT, host Michelle Dawn Mooney talks with Thomas Johnson, National Leader of Cybersecurity at BDO Digital, about vendors and cybersecurity. Johnson admits, “I’m accused of talking about cybersecurity that has nothing to do with technology”, which includes his college teaching job, where he teaches non-technical things like “making sure that people don’t click on links”. But he says non-technical aspects are important in the cyber community.

Mooney and Johnson also talk about:

  1. How you should not put everything in cybersecurity on the vendors
  2. Staying responsible as a consumer and IT provider
  3. Understanding and learning to work with the cloud

On the topic of vendor management, Johnson said, “I think it’s a super critical component, especially when organizations are looking at migrating workloads to The Cloud or using a service provider to be able to provide services, IT services, to the organization.” Johnson also warns not to rely solely on the vendors and promotes a responsible way of using vendors. He knows it can be tempting to leave everything up to vendors, but just like not clicking on links, being responsible is a non-technical component to cybersecurity that is just as vital to the job.

Thomas Johnson has worked in the technology field for over three decades, going from Information Technology Manager at MB Financial, to VP/Managing Director at Aqueity, to most recently being the National Leader in Cybersecurity at BDO Digital.

Recent Episodes

Enterprise AI is advancing faster than most companies can govern it. Behind the scenes, AI systems are already influencing decisions tied to revenue, operations, compliance, customer outcomes, and risk — yet many organizations still lack a clear way to measure, explain, or oversee what those systems are doing. That is the gap TheAIAudit was…

Healthcare is being pushed to modernize faster than ever, as AI tools, virtual care, and digital patient experiences shift from innovation to expectation. Recent survey data from McKinsey & Company indicates that about half of U.S. healthcare leaders say their organizations have already put generative AI into practice, underscoring how quickly the technology is…

Artificial intelligence has already moved beyond the hype cycle and into the day-to-day reality of business operations. Companies across industries are rushing to integrate AI into their workflows, but many are running into the same challenge: it’s relatively easy to build something that works in a demo, and much harder to make it reliable…