Defense in Depth cover image

Defense in Depth

Doing Third Party Risk Management Right

Jan 4, 2024
In this podcast, Erik Decker, CISO of Intermountain Health, joins the hosts to discuss the struggles faced in managing third-party risk. They explore the ineffectiveness of questionnaires and debate the right approach. They also touch on the future of supply chain risk, the benefits of a centralized platform for risk information, and the importance of communication and building relationships with vendors.
30:30

Episode guests

Podcast summary created with Snipd AI

Quick takeaways

  • Questionnaires are inefficient and do not effectively reduce third-party risk.
  • Focusing on the 20% of activities with the greatest impact can significantly reduce third-party risk.

Deep dives

The struggle of managing third party risk

Managing third party risk is a challenge due to the inefficiency of questionnaires and the lack of impact they have on reducing risk.

Get the Snipd
podcast app

Unlock the knowledge in podcasts with the podcast player of the future.
App store bannerPlay store banner

AI-powered
podcast player

Listen to all your favourite podcasts with AI-powered features

Discover
highlights

Listen to the best highlights from the podcasts you love and dive into the full episode

Save any
moment

Hear something you like? Tap your headphones to save it with AI-generated key takeaways

Share
& Export

Send highlights to Twitter, WhatsApp or export them to Notion, Readwise & more

AI-powered
podcast player

Listen to all your favourite podcasts with AI-powered features

Discover
highlights

Listen to the best highlights from the podcasts you love and dive into the full episode