In this podcast, Erik Decker, CISO of Intermountain Health, joins the hosts to discuss the struggles faced in managing third-party risk. They explore the ineffectiveness of questionnaires and debate the right approach. They also touch on the future of supply chain risk, the benefits of a centralized platform for risk information, and the importance of communication and building relationships with vendors.
Questionnaires are inefficient and do not effectively reduce third-party risk.
Focusing on the 20% of activities with the greatest impact can significantly reduce third-party risk.
Deep dives
The struggle of managing third party risk
Managing third party risk is a challenge due to the inefficiency of questionnaires and the lack of impact they have on reducing risk.
The importance of focusing on the 20% that mitigates 80% of risk
The 80/20 rule applies to third party risk management, where focusing on the 20% of activities that have the greatest impact can significantly reduce risk.
The need for a shift in approach
The current approach to third party risk management is flawed and needs to shift towards continuous monitoring, automation, and relationship-focused discussions to effectively manage risk.
The future of third party risk management
The future lies in developing an ecosystem that facilitates continuous monitoring, sharing of risk information, and standardized reporting to better understand and manage third party risk.
Why are we all struggling trying to manage third-party risk?
Why do the hated questionnaires seem like compliance checkbox efforts?
Does anyone believe it reduces risk?
What's the right approach and how do you strike the right balance?
Thanks to our podcast sponsor, Praetorian
Praetorian helps companies adopt a prevention-first cybersecurity strategy by actively uncovering vulnerabilities and minimizing potential weaknesses before attackers can exploit them.
Get the Snipd podcast app
Unlock the knowledge in podcasts with the podcast player of the future.
AI-powered podcast player
Listen to all your favourite podcasts with AI-powered features
Discover highlights
Listen to the best highlights from the podcasts you love and dive into the full episode
Save any moment
Hear something you like? Tap your headphones to save it with AI-generated key takeaways
Share & Export
Send highlights to Twitter, WhatsApp or export them to Notion, Readwise & more
AI-powered podcast player
Listen to all your favourite podcasts with AI-powered features
Discover highlights
Listen to the best highlights from the podcasts you love and dive into the full episode