Beyond Your Borders: Managing Third-Party Risk

**Executive Summary:** This report examines the systemic risk posed by third-party and fourth-party compromises, presents case studies (Storm-1167 BEC phishing campaign, LockBit attempted ransomware via a compromised third-party admin account, and a Cisco Duo vendor SMS/VoIP logging compromise), and outlines ReliaQuest's detection, monitoring, and response best practices to identify, contain, and mitigate impacts from such supply-chain oriented attacks.