The market is flooded with solutions for third-party vendor risk management. That's understandable at a time when 99% of the Global 2000 have IT vendors that suffered a recent security breach. But few if any focus on protecting the fast-growing mobile attack surface. The bottom line is that the mobile app estate is still treated as if secure by design. It is not.

Mobile risk comes not just from malware-laden applications that find their way onto Google Play. Even the iOS ecosystem is being targeted with increasing frequency. And use of open source components by both in-house developers and commercial software makers represents an escalating business risk. The complexity of open source dependencies makes vulnerabilities hard to track and patch. Some have lain dormant for years.

Fail to protect your mobile attack surface, and it's akin to bolting the front door but leaving your windows unlocked. (building a fortress but leaving a back door open.) It's time to get serious about mobile app security risk.