The best way to do this is with a Resiliency strategy. According to Merriam-Webster, resilience is "the ability to recover from or adjust easily to misfortune or change". In vendor risk management terms, this means ensuring there is a way for your organization to still perform during an operational interruption like the AWS outage.
The best-known strategy is Zero Trust, and I discuss how to implement it in a TPRM program in my second book, "Zero Trust and Third-Party Risk". In a nutshell, this involves determining your most critical vendors and ensuring you develop a ZT strategy both with them and around the risk they present. Ensure you've got a mature IAM program that involves the third-parties access. And always practice with your critical vendors table-top exercises to validate how (not if, but when) you'll both operate when impacted by an outage.
It is a lot more than a blog can cover, but the road to sanity is through the Resiliency door. Open it.
From Third Party Threat Hunting™ (TPTH™)
Put it to work
Which of your vendors are critical?
The free eight-step vendor checklist: sort your vendors into systemically critical, critical or ordinary.
Get the checklist →Privileged access
The free VAULTS™ training: 31 minutes on privileged access review, with a worked review.
Get the free training →