The Age of Promises is Over, Vendors Must Now Lead with Evidence-Based Assurances
Digitalisation World interviewed NetSPI’s Director of Services, EMEA, Sam Kirkman, for a March 12, 2026 article exploring why organizations must demand evidence-based assurances from vendors to ensure robust third-party security. Read the preview below or view it online.
+++
In today’s evolving cyber threat landscape, traditional vendor assurances like contracts and periodic audits are no longer sufficient. Sam Kirkman emphasizes the need for vendors to shift from trust-based compliance to evidence-based security, where measurable and continuous validation replaces outdated promises. As AI-accelerated attacks and interconnected systems increase risks, organizations must recognize that vendor vulnerabilities directly impact their own security posture. This shift requires vendors to actively demonstrate their resilience through practices like continuous penetration testing, which not only identifies vulnerabilities but also strengthens customer trust and reduces breach risks.
Kirkman calls on CISOs to lead the charge in demanding proof over promises from vendors. By prioritizing ongoing validation, structured communication, and proactive vulnerability management, organizations can build stronger, more resilient partnerships. In a world where AI weaponization and supply chain attacks are on the rise, confidence in cybersecurity must be earned through sustained demonstration, not static assurances.
You can read the full article here.
Authors:
Explore More News
AI’s Role in the Next Era of Pentesting
This article discusses how AI can accelerate penetration testing, but without human expertise to validate findings and apply business context, organizations risk confusing faster output with stronger security.
Why Continuous Security Validation is Becoming a Security Imperative
CTO Magazine interviewed NetSPI's Field CISO, Nabil Hannan, for a June 11, 2026, article about how cloud-native architectures, continuous deployment pipelines, APIs, and AI-assisted development have accelerated change across enterprise environments.
Canvas breach puts global education cyber risk in focus
ITBrief interviewed NetSPI's Field CISO, Nabil Hannan, for a May 24, 2026 article about a major data breach in Instructure's Canvas learning management system disrupting final exams at universities.