Mitigating Cybersecurity Risks in Financial Institutions through Strategic Third- Party Risk Governance Frameworks

Abstract

This study investigates how strategic third-party risk governance frameworks can mitigate cybersecurity threats in financial institutions. Using data from the Verizon Data Breach Investigations Report, the Basel Committee’s Quantitative Impact Study, and the Privacy Rights Clearinghouse breach database, the research applies descriptive statistics, multivariate regression, and event study analysis. Key findings reveal that third-party software vulnerabilities and vendor credential theft account for 18.08% and 16.10% of breaches respectively. Regression results show that continuous monitoring and third-party audits significantly reduce incident frequency, while real-world breach events highlight governance lapses tied to delayed disclosure and inadequate oversight. The study recommends enforcing continuous vendor performance monitoring, mandating software supply chain audits, embedding cybersecurity clauses in vendor contracts, and promoting cross-institutional threat intelligence hubs. These insights offer targeted solutions to strengthen oversight and enhance cybersecurity resilience in increasingly complex vendor ecosystems.