perpus@umsida.ac.id +62-31-8945444

Shama, Afsara Tasnim (2024) Third-Party Risk Management in API-Driven Ecosystems: Continuous Vendor Security Practices and Emerging Challenges. American Journal of Technology Advancement, 1 (4). ISSN 2997-9382

[img] Text
AJTA_Third-Party+Risk+Management.pdf

Download (653kB)
Official URL: https://semantjournals.org/index.php/AJTA/article/...

Abstract

Background: APIs are crucial for the digital transformation process due to the integration capabilities provided by them. Nevertheless, greater dependence on outside services has increased the number of potential cybersecurity threats, which makes the problem of third-party risk management one of the top priorities in organizations. The purpose of this study is to identify current continuous vendor security approaches and security challenges that arise in the environment of APIs. Methods: Quantitative cross-sectional research method was applied in the current study. Online questionnaire survey was administered to the US professionals, where 185 questionnaires were distributed, and 165 valid responses were received. Results: The highest mean was obtained in Third Party Risk Management Effectiveness (4.15), while Real Time API Monitoring received the second highest mean (4.12). Real Time API Monitoring also received the highest positive response (74.5%) showing its significance in the process of continuous security management. Limited Vendor Transparency (18.2%) became the main challenge in terms of third-party security risks. Correlation analysis showed the presence of strong positive correlations among all variables studied; the highest correlation was obtained for Real Time API Monitoring and Third-Party Risk Management Effectiveness (r = 0.756), which proves that more monitoring leads to better risk management. Conclusion: The results show the significance of vendor continuous security practices, real-time API monitoring and compliance management in the process of third-party risk management.

Item Type: Article
Uncontrolled Keywords: Third-party risk management, API security, Vendor security, Continuous monitoring, Cybersecurity governance
Subjects: H Social Sciences
Depositing User: admin eprints
Date Deposited: 25 Aug 2026 03:00
Last Modified: 25 Aug 2026 03:00
URI: http://eprints.umsida.ac.id/id/eprint/17009

Actions (login required)

View Item View Item