Third-party/supply chain risks are significant but often inadequately managed by organizations.

CISOs historically focused on internal security but now face new challenges from external risks tied to business partnerships.

Challenges include understanding and managing partner risks, involving multiple departments in risk assessment, and reliance on outdated assessment methods.

Solutions involve gaining visibility into the ecosystem, collaborating with business stakeholders, and implementing real-time monitoring with standards-based frameworks.