Overview[]
In the third party trust model, an organization establishes a level of trust with another organization on the basis of assurances provided by a mutually trusted third party. For example, two organizations attempting to establish a trust relationship may not have a direct trust history between them but do have a trust relationship with a third organization. The third party, which is trusted by both organizations, brokers the trust relationship between the two organizations, thus helping to establish the required level of trust, also known as transitive trust.
Source[]
- Electricity Subsector Cybersecurity Risk Management Process, App. E, at 71.