Protecting a network

What I understood, having a separate switch/network is not an option right now. Do you have any suggestions on what we can do to minimize or eliminate this risk?

Answer: If you do not have access to the switch and having a separate switch/network is not an option at the moment, your options are very limited.

If you want to treat the risk you could try to:
- Implement cryptography to protect communication between the computers in your network and to protect you files.
- Implement access control into the shared folders in your network.
- Make an agreement with company that controls the switch and specifying the security controls they need to implement.

Other alternatives in terms of risk management are accept the risk (and do nothing), and avoid the risk (e.g., by stopping using the switch).

This article will provid e you further explanation about handling suppliers:
- 6-step process for handling supplier security according to ISO 27001 https://advisera.com/27001academy/blog/2014/06/30/6-step-process-for-handling-supplier-security-according-to-iso-27001/