It's Time to Rethink Third-Party Risk Assessment

This commentary examines the growing cybersecurity risks from third-party and supply chain dependencies—amplified by SaaS sprawl and decentralized purchasing—and urges organizations to modernize third-party risk assessment with continuous monitoring, risk-based vendor classification, standardized processes, regulatory compliance checks, fourth-party and supply chain resilience evaluations, program scaling, and AI-driven automation, referencing SolarWinds and MOVEit to underscore the stakes.