Third Partyhttps://www.spreaker.com/podcast/third-party--6740712enTechnologyCopyright Sweet Fishhttps://d3wo5wojvuv7l.cloudfront.net/t_rss_itunes_square_1400/images.spreaker.com/original/88bcfa09aabf33880a59e3b41898c43f.jpgThird Partyhttps://www.spreaker.com/podcast/third-party--6740712Wed, 09 Sep 2026 10:23:19 +0000Sweet FishSweet Fishfeeds@spreaker.comIf you manage third-party cyber risk, you’ve seen it all: meaningless scorecards, black-box tools, and endless frameworks that never quite connect to business impact. Third-Party is the podcast built for the people behind the dashboards. The ones...falseddd0a1e2-0d66-5cdd-bbd1-4ecc027f1888episodicAre Your Vendors Lying to You?https://www.spreaker.com/episode/are-your-vendors-lying-to-you--75020504
  • Why yes or no questionnaire answers measure compliance, not the efficiency of a control
  • The three types of verification, from signals to behavior analysis to vendor testimony
  • Why every signal needs a confidence level before you decide which battles to fight
  • How to get real value from SOC 2 reports and where third-party audits fall short
  • Why most programs are built to discover and ask questions, but never to follow up
  • What happens to trust but verify when AI is producing the answers on both sides
    • If your program collects a lot of vendor answers and verifies almost none of them, this conversation is worth your time.
    ]]>    b528749a-22d0-4bb7-aaf8-ec4c1aa934edWed, 09 Sep 2026 10:00:00 +0000Sweet FishYour vendor says they have MFA everywhere. They say their data is encrypted. They say the right things on every questionnaire you send. So why is there almost always a gap between what a vendor tells you and what is actually happening inside their...
  • Why yes or no questionnaire answers measure compliance, not the efficiency of a control
  • The three types of verification, from signals to behavior analysis to vendor testimony
  • Why every signal needs a confidence level before you decide which battles to fight
  • How to get real value from SOC 2 reports and where third-party audits fall short
  • Why most programs are built to discover and ask questions, but never to follow up
  • What happens to trust but verify when AI is producing the answers on both sides
    • If your program collects a lot of vendor answers and verifies almost none of them, this conversation is worth your time.
    ]]>    2145falsefull    The AI Scanner Hype Testhttps://www.spreaker.com/episode/the-ai-scanner-hype-test--74695809
  • Why the real story is the gap between vulnerabilities discovered and vulnerabilities patched
  • Where AI genuinely helps today, from discovery and attack chaining to triage
  • Why shifting these tools earlier in the development cycle may matter more than faster remediation
  • How to cut through vendor AI claims using explainability as your filter
  • Why prioritization, not patching everything, is the only way out of the deluge
  • What security leaders should expect from these tools over the next year

    • If you have ever wondered whether the AI vulnerability hype is signal or noise, this conversation gives you a framework to tell the difference.]]>    ce37df93-d7ac-41d4-af11-5da2f08d8693Wed, 26 Aug 2026 10:00:00 +0000Sweet FishAI-powered vulnerability scanners can now find tens of thousands of flaws in a matter of weeks. That sounds like a breakthrough until you look at the other number: the patch rate is under one percent. So are these frontier models a genuine game...
  • Why the real story is the gap between vulnerabilities discovered and vulnerabilities patched
  • Where AI genuinely helps today, from discovery and attack chaining to triage
  • Why shifting these tools earlier in the development cycle may matter more than faster remediation
  • How to cut through vendor AI claims using explainability as your filter
  • Why prioritization, not patching everything, is the only way out of the deluge
  • What security leaders should expect from these tools over the next year

    • If you have ever wondered whether the AI vulnerability hype is signal or noise, this conversation gives you a framework to tell the difference.]]>    2230falsefull    Your TPRM Program Isn't Fixablehttps://www.spreaker.com/episode/your-tprm-program-isn-t-fixable--7384155639ee3447-76a5-479f-94a4-8ab93baf555aWed, 12 Aug 2026 10:00:00 +0000Sweet FishYour third-party risk program is probably built on questionnaires, and you already know they don't really work. So the real question is not how to make them better. It's whether you should tear the whole thing down and start over.In this episode,...2263falsefullYou Can't Say No to Your Vendorshttps://www.spreaker.com/episode/you-can-t-say-no-to-your-vendors--73233443
  • Why "saying no" was never the CISO's job, and what the real role is
  • How to turn a contract into a collaboration tool instead of a weapon
  • Why intelligence-led outreach beats questionnaire fatigue every time
  • How to communicate vendor risk so business stakeholders actually respond
  • What to do when a hard-to-replace vendor won't budge
  • Why the first interactions with a vendor set the tone for the entire relationship
    • If you have ever felt ignored by a vendor who has bigger customers than you, this conversation will change how you show up to the table.]]>    06dd33a0-3e7e-4ec4-864f-25f5aa69503eWed, 29 Jul 2026 10:00:00 +0000Sweet FishYou can't actually say no to a vendor. Ask any room of CISOs how many of them have the power to walk away from a vendor relationship over cyber risk, and the honest answer is almost none. So if leverage is mostly an illusion, what actually moves a...
  • Why "saying no" was never the CISO's job, and what the real role is
  • How to turn a contract into a collaboration tool instead of a weapon
  • Why intelligence-led outreach beats questionnaire fatigue every time
  • How to communicate vendor risk so business stakeholders actually respond
  • What to do when a hard-to-replace vendor won't budge
  • Why the first interactions with a vendor set the tone for the entire relationship
    • If you have ever felt ignored by a vendor who has bigger customers than you, this conversation will change how you show up to the table.]]>    2469falsefull    Why Manufacturing Supply Chains Are Ransomware’s Favorite Targethttps://www.spreaker.com/episode/why-manufacturing-supply-chains-are-ransomware-s-favorite-target--72988732
  • Understand why manufacturing is a top target for cyber attacks
  • Learn how downtime risk outweighs traditional data breach concerns
  • Discover the gap between IT security and operational technology (OT)
  • Explore why many organizations still struggle with basic cyber hygiene
  • Get insights into how cyber threats are evolving across global supply chains
    • Don’t risk production downtime or supply chain disruption. Learn how to identify and prioritize the cyber risks that matter most.]]>    ab96986b-4f3f-47f6-bf06-563eab927d02Wed, 15 Jul 2026 10:00:00 +0000Sweet FishManufacturing cybersecurity risk is rising faster than most organizations realize—and many teams are still missing the basics. In this episode, we break down manufacturing cybersecurity risk and why this industry has become one of the most targeted...
  • Understand why manufacturing is a top target for cyber attacks
  • Learn how downtime risk outweighs traditional data breach concerns
  • Discover the gap between IT security and operational technology (OT)
  • Explore why many organizations still struggle with basic cyber hygiene
  • Get insights into how cyber threats are evolving across global supply chains
    • Don’t risk production downtime or supply chain disruption. Learn how to identify and prioritize the cyber risks that matter most.]]>    2009falsefull    The #1 Mistake Boards Make on Cyber Riskhttps://www.spreaker.com/episode/the-1-mistake-boards-make-on-cyber-risk--72769044
  • Learn how to translate complex cyber risk into language boards care about
  • Discover why common tools like heat maps often fail executives
  • Understand the 3 things boards prioritize—and how to align your messaging
  • Get practical strategies for answering “bad” board questions effectively
  • See how better communication can directly improve organizational resilience
    • Don’t risk your message getting lost in complexity. Learn how to communicate cyber risk in a way that drives real decisions.]]>    4e437904-c3a6-499c-8d71-2a8ef117d944Wed, 01 Jul 2026 10:00:00 +0000Sweet FishCyber risk communication with boards is broken—and most organizations don’t realize how much it’s costing them. In this episode, we unpack cyber risk communication with boards and reveal why even well-prepared security leaders fail to get buy-in where...
  • Learn how to translate complex cyber risk into language boards care about
  • Discover why common tools like heat maps often fail executives
  • Understand the 3 things boards prioritize—and how to align your messaging
  • Get practical strategies for answering “bad” board questions effectively
  • See how better communication can directly improve organizational resilience
    • Don’t risk your message getting lost in complexity. Learn how to communicate cyber risk in a way that drives real decisions.]]>    1950falsefull    The Hidden Signals Predicting Vendor Collapsehttps://www.spreaker.com/episode/the-hidden-signals-predicting-vendor-collapse--72562133
  • How to identify early warning signals of vendor failure before a breach happens
  • Why layoffs, automation, and global conflict can increase third-party risk exposure
  • The difference between correlation and causation in risk modeling
  • How attackers exploit chaos and weak vendor ecosystems
  • Why vendor self-reporting often fails and what to rely on instead
    • Don’t risk missing the signals that matter. Learn how to spot risk earlier and make smarter third-party decisions before it’s too late.]]>    e4b5cf0e-591a-4f07-9ec5-2df6d1a8c206Wed, 17 Jun 2026 10:00:00 +0000Sweet FishThird-Party Risk Prediction is the future of cybersecurity, but can you actually predict when a vendor will fail? In this episode of Third Party, we explore third-party risk prediction and whether forecasting vendor failure is realistic or just...
  • How to identify early warning signals of vendor failure before a breach happens
  • Why layoffs, automation, and global conflict can increase third-party risk exposure
  • The difference between correlation and causation in risk modeling
  • How attackers exploit chaos and weak vendor ecosystems
  • Why vendor self-reporting often fails and what to rely on instead
    • Don’t risk missing the signals that matter. Learn how to spot risk earlier and make smarter third-party decisions before it’s too late.]]>    2232falsefull    Mythos Hype Check: TPRM Paradigm Shift or Big Nothing Burgerhttps://www.spreaker.com/episode/mythos-hype-check-tprm-paradigm-shift-or-big-nothing-burger--72341679
  • What Mythos and Project Glasswing actually are and why the hype may be outpacing the reality
  • Why the vulnerability deluge is already unmanageable with traditional CVSS-based prioritization
  • How the 135-day embargo window affects your third-party exposure
  • Why fourth-party risk, meaning what your vendors run rather than just who they are, is becoming the real blind spot
  • What SBOMs have to do with the future of supply chain vulnerability management
  • The three things security leaders should do right now to prepare their programs
    • This is not a theoretical conversation. It's the one your program needs before the window closes.]]>    1327fcdb-d90d-4c59-b5b9-41ba736d169cThu, 04 Jun 2026 10:00:00 +0000Sweet FishA new AI model called Mythos promises to find vulnerabilities faster than any human team. But what does that actually mean for the security leaders responsible for managing third-party risk? In this special episode, Jeffrey Wheatman is joined by Bob...
  • What Mythos and Project Glasswing actually are and why the hype may be outpacing the reality
  • Why the vulnerability deluge is already unmanageable with traditional CVSS-based prioritization
  • How the 135-day embargo window affects your third-party exposure
  • Why fourth-party risk, meaning what your vendors run rather than just who they are, is becoming the real blind spot
  • What SBOMs have to do with the future of supply chain vulnerability management
  • The three things security leaders should do right now to prepare their programs
    • This is not a theoretical conversation. It's the one your program needs before the window closes.]]>    2729falsefull    Are You Measuring the Right Risks…Or Just the Easiest Ones?https://www.spreaker.com/episode/are-you-measuring-the-right-risks-or-just-the-easiest-ones--72082411
  • Why most third party risk metrics are based on convenience, not impact
  • The difference between measuring activity vs. measuring real risk
  • How to make risk meaningful to boards and executive stakeholders
  • What “good” risk metrics actually look like in practice
  • How to avoid false confidence from incomplete or misleading data
    • Don’t risk building your strategy on the wrong signals. Learn how to measure what actually matters—and make better decisions because of it.]]>    c7afcdd7-7b6d-41b4-b549-815e951cf02dWed, 20 May 2026 10:00:00 +0000Sweet FishAre you measuring the right risks in your third party risk management program—or just the easiest ones? In this episode, we break down how most teams approach third party risk management metrics and why those metrics often fail to reflect real...
  • Why most third party risk metrics are based on convenience, not impact
  • The difference between measuring activity vs. measuring real risk
  • How to make risk meaningful to boards and executive stakeholders
  • What “good” risk metrics actually look like in practice
  • How to avoid false confidence from incomplete or misleading data
    • Don’t risk building your strategy on the wrong signals. Learn how to measure what actually matters—and make better decisions because of it.]]>    1890falsefull    Why Automation Is Creating More Cyber Riskhttps://www.spreaker.com/episode/why-automation-is-creating-more-cyber-risk--71888781
  • How automation in TPCRM can unintentionally increase risk
  • The hidden tradeoffs between speed and accuracy in vendor assessments
  • Why more data doesn’t always lead to better decisions
  • Where AI and algorithms fall short in real-world risk scenarios
  • How to balance automation with human judgment for better outcomes
  • Practical ways to improve visibility and decision-making in your TPCRM program
    • Don’t risk scaling bad decisions faster. Learn how to balance automation and accuracy to protect your business.]]>    48911ad7-3278-477d-8ee9-9f4a84e1cc03Wed, 06 May 2026 10:00:00 +0000Sweet FishAutomation vs Accuracy in TPCRM is one of the biggest challenges in modern third-party risk management. In this episode, we break down how the push for faster automation is impacting accuracy, and what that means for your TPCRM program. If you’re...
  • How automation in TPCRM can unintentionally increase risk
  • The hidden tradeoffs between speed and accuracy in vendor assessments
  • Why more data doesn’t always lead to better decisions
  • Where AI and algorithms fall short in real-world risk scenarios
  • How to balance automation with human judgment for better outcomes
  • Practical ways to improve visibility and decision-making in your TPCRM program
    • Don’t risk scaling bad decisions faster. Learn how to balance automation and accuracy to protect your business.]]>    2053falsefull    How to Calculate the Real Cost of a Third-Party Breachhttps://www.spreaker.com/episode/how-to-calculate-the-real-cost-of-a-third-party-breach--71552796
  • Why calculating the financial impact of a third-party breach is critical for executive decision making
  • How security leaders translate cyber risk into dollars, euros, or pounds
  • Why “something bad could happen” is not enough to justify cybersecurity investment
  • The difference between precision and usefulness when modeling cyber risk
  • How risk quantification helps prioritize vendors and third-party exposures
  • Why boards and executives respond better to financial risk than technical risk language
    • Don’t risk letting third-party cyber risk remain invisible to leadership. Learn how to calculate the real financial impact of a third-party breach and turn risk conversations into decisions that protect your organization.
    0:00 Introduction & Teaser0:50 Welcome & Episode Overview2:01 Guest Introduction: Jack Jones & the Origin of FAIR7:17 Challenges to Implementing Risk Quantification10:57 Wrap-Up with Jack Jones11:23 Calculating Financial Impact of a Third-Party Breach25:54 Precision vs. Accuracy in Risk Models30:01 Research Roundup: Cybersecurity Outlook 202636:44 Agree or Disagree39:41 Outro & Next Episode Preview]]>    224569fd-3000-47f1-9141-a9eaec476220Wed, 22 Apr 2026 10:00:00 +0000Sweet FishCalculating the real financial impact of a third-party breach is one of the hardest challenges in cybersecurity today. In this episode, Jeffrey Wheatman, Bob Maley, and Ferhat Dikbiyik explore how organizations can move beyond vague warnings about...
  • Why calculating the financial impact of a third-party breach is critical for executive decision making
  • How security leaders translate cyber risk into dollars, euros, or pounds
  • Why “something bad could happen” is not enough to justify cybersecurity investment
  • The difference between precision and usefulness when modeling cyber risk
  • How risk quantification helps prioritize vendors and third-party exposures
  • Why boards and executives respond better to financial risk than technical risk language
    • Don’t risk letting third-party cyber risk remain invisible to leadership. Learn how to calculate the real financial impact of a third-party breach and turn risk conversations into decisions that protect your organization.
    0:00 Introduction & Teaser0:50 Welcome & Episode Overview2:01 Guest Introduction: Jack Jones & the Origin of FAIR7:17 Challenges to Implementing Risk Quantification10:57 Wrap-Up with Jack Jones11:23 Calculating Financial Impact of a Third-Party Breach25:54 Precision vs. Accuracy in Risk Models30:01 Research Roundup: Cybersecurity Outlook 202636:44 Agree or Disagree39:41 Outro & Next Episode Preview]]>    2402falsefull    Vendor Sprawl Is Out of Control (Here’s How the Best Teams Fix It)https://www.spreaker.com/episode/vendor-sprawl-is-out-of-control-here-s-how-the-best-teams-fix-it--71179952
  • Why vendor sprawl is accelerating across modern organizations
  • How hidden third parties introduce unexpected cyber risk
  • The difference between vendor visibility and real vendor risk management
  • Why adding more tools can sometimes make the problem worse
  • Practical ways security teams are prioritizing the vendors that matter most
  • How AI and automation are changing third-party risk management
    • Don’t risk letting vendor sprawl quietly expand your attack surface. Learn how leading teams are taking back control before hidden vendor risk becomes the next breach.]]>    a462544d-0a5f-47c6-bdec-c907d7de83f3Wed, 08 Apr 2026 10:00:00 +0000Sweet FishVendor sprawl is out of control, and most organizations have far more third-party vendors than they realize. In this episode, Jeffrey Wheatman, Bob Maley, and Ferhat Dikbiyik unpack the growing problem of vendor sprawl and why it has quietly become...
  • Why vendor sprawl is accelerating across modern organizations
  • How hidden third parties introduce unexpected cyber risk
  • The difference between vendor visibility and real vendor risk management
  • Why adding more tools can sometimes make the problem worse
  • Practical ways security teams are prioritizing the vendors that matter most
  • How AI and automation are changing third-party risk management
    • Don’t risk letting vendor sprawl quietly expand your attack surface. Learn how leading teams are taking back control before hidden vendor risk becomes the next breach.]]>    2338falsefull    What You Should NEVER Automate in Risk Programshttps://www.spreaker.com/episode/what-you-should-never-automate-in-risk-programs--70870107
  • What TPCRM automation actually means and why many programs misunderstand it
  • The biggest mistake organizations make when automating risk workflows
  • Why automating a broken process makes risk programs worse
  • Where automation can genuinely improve efficiency in TPCRM programs
  • The decisions that should never be fully automated
  • Why visibility and traceability matter when AI and automation are involved
    • Don’t risk automating the wrong parts of your cyber risk program. Learn how to apply TPCRM automation the right way before it creates new blind spots.]]>    80f14f06-2d65-43ad-be28-7805dc6ee138Wed, 25 Mar 2026 10:00:00 +0000Sweet FishTPCRM automation is rapidly becoming a priority for risk teams, but automating the wrong things can quietly increase exposure instead of reducing it. In this episode, Jeffrey Wheatman, Bob Maley, and Ferhat Dikbiyik unpack the reality of TPCRM...
  • What TPCRM automation actually means and why many programs misunderstand it
  • The biggest mistake organizations make when automating risk workflows
  • Why automating a broken process makes risk programs worse
  • Where automation can genuinely improve efficiency in TPCRM programs
  • The decisions that should never be fully automated
  • Why visibility and traceability matter when AI and automation are involved
    • Don’t risk automating the wrong parts of your cyber risk program. Learn how to apply TPCRM automation the right way before it creates new blind spots.]]>    2259falsefull    Is Cybersecurity Regulation Actually Dangerous?https://www.spreaker.com/episode/is-cybersecurity-regulation-actually-dangerous--70589146
  • Whether cybersecurity regulation actually improves security outcomes
  • How compliance can become a checkbox that misses real risk
  • When regulation helps CISOs secure budget and attention
  • Why outdated and overly prescriptive rules can increase exposure
  • The difference between managing audits and managing real risk
    • Don’t risk confusing compliance with protection. Learn how to think critically about cybersecurity regulation and focus on what actually makes organizations safer before regulation becomes a liability instead of a safeguard.]]>    468819b0-a36a-4001-b51e-b534ebd7ed87Wed, 11 Mar 2026 10:00:00 +0000Sweet FishIs cybersecurity regulation actually dangerous? In this episode, we examine whether cybersecurity regulation is improving real security or quietly making organizations less safe. If you have ever wondered whether compliance helps or hurts your...
  • Whether cybersecurity regulation actually improves security outcomes
  • How compliance can become a checkbox that misses real risk
  • When regulation helps CISOs secure budget and attention
  • Why outdated and overly prescriptive rules can increase exposure
  • The difference between managing audits and managing real risk
    • Don’t risk confusing compliance with protection. Learn how to think critically about cybersecurity regulation and focus on what actually makes organizations safer before regulation becomes a liability instead of a safeguard.]]>    3372falsefull    The Real Meaning of “C” in TPCRMhttps://www.spreaker.com/episode/the-real-meaning-of-c-in-tpcrm--70266361
  • What the “C” in TPCRM actually stands for… and what it doesn’t
  • Why cyber risk isn’t just about data breaches or compliance
  • How cyber creates cascading impact across operations, finance, and supply chains
  • Why treating cyber as a point-in-time risk leaves organizations exposed
  • How leaders should think about cyber in business and boardroom terms
    • Don’t risk treating cyber as a checkbox while it quietly drives your biggest exposures. Learn how to understand the real “C” in TPCRM and protect your business before cyber risk turns into operational and financial damage.]]>    d3e2864b-0700-4f3b-8777-b2e284d6122eWed, 25 Feb 2026 11:00:00 +0000Sweet FishWhat puts the “C” in TPCRM? As third-party risk management evolves, leaders are asking what the “C” in TPCRM really means, and why cyber risk now has an outsized impact on every other risk. We unpack what puts the “C” in TPCRM, why cyber is more than...
  • What the “C” in TPCRM actually stands for… and what it doesn’t
  • Why cyber risk isn’t just about data breaches or compliance
  • How cyber creates cascading impact across operations, finance, and supply chains
  • Why treating cyber as a point-in-time risk leaves organizations exposed
  • How leaders should think about cyber in business and boardroom terms
    • Don’t risk treating cyber as a checkbox while it quietly drives your biggest exposures. Learn how to understand the real “C” in TPCRM and protect your business before cyber risk turns into operational and financial damage.]]>    2528falsefull    Whose Breach Is It Anyway?https://www.spreaker.com/episode/whose-breach-is-it-anyway--69971323
  • Why “whose breach is it anyway” is the wrong question—and the better ones to ask
  • How finger-pointing delays response and increases long-term damage
  • The hidden risks of third-party and supply-chain breaches
  • When transparency helps—and when it can backfire
  • Who ultimately bears the cost of a breach: vendors, companies, or customers
    • Don’t risk repeating the same mistakes after your next vendor incident. Learn how to move past blame, protect your customers, and respond to breaches the right way…before shared damage becomes permanent damage.]]>    a0a211c1-10bd-46c2-aa3f-9edac946c9ebWed, 11 Feb 2026 11:00:00 +0000Sweet FishWhose Breach Is It Anyway? When a vendor gets breached and data is exposed, whose breach is it anyway, and who actually pays the price? In this episode, we break down why finger-pointing after every breach is becoming the default response and what...
  • Why “whose breach is it anyway” is the wrong question—and the better ones to ask
  • How finger-pointing delays response and increases long-term damage
  • The hidden risks of third-party and supply-chain breaches
  • When transparency helps—and when it can backfire
  • Who ultimately bears the cost of a breach: vendors, companies, or customers
    • Don’t risk repeating the same mistakes after your next vendor incident. Learn how to move past blame, protect your customers, and respond to breaches the right way…before shared damage becomes permanent damage.]]>    2559falsefull    The Biggest Lie in Cybersecurityhttps://www.spreaker.com/episode/the-biggest-lie-in-cybersecurity--69643238








    ]]>    38638961-88a2-44cd-a663-fa366d7dcc0fWed, 28 Jan 2026 11:00:00 +0000Sweet Fish - - - - - -








    ]]>    2391falsefull    The Truth About AI in Risk Managementhttps://www.spreaker.com/episode/the-truth-about-ai-in-risk-management--6943600336e4d81b-4e55-451f-a665-3686dc93b3ddWed, 14 Jan 2026 11:00:00 +0000Sweet FishAI risk models are changing how organizations assess vendors, quantify cyber risk, and make high-stakes decisions, but most leaders don’t truly understand what’s happening under the hood. In this episode, AI risk models are stripped down and...2600falsefullWhy 2026 Might Be the Hardest Cyber Year Yethttps://www.spreaker.com/episode/why-2026-might-be-the-hardest-cyber-year-yet--69258856
  • The biggest 2026 cybersecurity predictions and why experts expect things to get worse before they get better
  • How AI risk is accelerating beyond traditional time horizons
  • Why 50% of AI vendors may shut down in 2026, and what that means for your organization
  • The real reason third-party breaches will outnumber direct attacks
  • Where automation is being used incorrectly, and where it should be deployed
  • Why boards still aren’t asking the right questions (and the questions they must ask in 2026)
  • How AI is reshaping cybersecurity roles—from entry-level to the C-suite
    • 2026 won’t reward teams who wait. Don’t risk falling behind. Learn what’s coming and how to prepare today.]]>    e4e19249-de4b-4d9d-8485-4ba3a92ba501Wed, 31 Dec 2025 11:00:00 +0000Sweet FishThe 2026 cybersecurity predictions are here, and they’re more urgent than anyone expected. In this episode, hosts Jeffrey Wheatman, Bob Maley, and Ferhat Dikbiyik break down what’s coming in the next 12 months, why AI risk is accelerating faster than...
  • The biggest 2026 cybersecurity predictions and why experts expect things to get worse before they get better
  • How AI risk is accelerating beyond traditional time horizons
  • Why 50% of AI vendors may shut down in 2026, and what that means for your organization
  • The real reason third-party breaches will outnumber direct attacks
  • Where automation is being used incorrectly, and where it should be deployed
  • Why boards still aren’t asking the right questions (and the questions they must ask in 2026)
  • How AI is reshaping cybersecurity roles—from entry-level to the C-suite
    • 2026 won’t reward teams who wait. Don’t risk falling behind. Learn what’s coming and how to prepare today.]]>    3094falsefull    This Is Why Third-Party Risk Never Endshttps://www.spreaker.com/episode/this-is-why-third-party-risk-never-ends--69095717
  • Why annual assessments fail the moment they’re finished
  • How dashboards and “pretty charts” create dangerous blind spots
  • The truth about compliance vs. real security
  • What “set it and forget it” gets wrong about cyber risk
  • How culture—not tools—decides whether your organization stays secure
    • Whether you’re leading a TPRM team, building a compliance framework, or managing vendor relationships, this episode gives you actionable insight and real-world fixes from experts who’ve seen it all.Don’t risk another blind spot. Learn how to transform compliance checklists into true security confidence—before your next breach does it for you.]]>    8b42c12b-63e5-425f-99ff-1cbda0b12bcdWed, 17 Dec 2025 11:00:00 +0000Sweet FishThird-party risk management is broken, and this episode of Third Party shows you exactly why. Discover the five biggest mistakes companies make when managing vendors and compliance programs, and learn how to fix them before they cost you trust, money,...
  • Why annual assessments fail the moment they’re finished
  • How dashboards and “pretty charts” create dangerous blind spots
  • The truth about compliance vs. real security
  • What “set it and forget it” gets wrong about cyber risk
  • How culture—not tools—decides whether your organization stays secure
    • Whether you’re leading a TPRM team, building a compliance framework, or managing vendor relationships, this episode gives you actionable insight and real-world fixes from experts who’ve seen it all.Don’t risk another blind spot. Learn how to transform compliance checklists into true security confidence—before your next breach does it for you.]]>    3048falsefull    How to Beat Ransomware Fatiguehttps://www.spreaker.com/episode/how-to-beat-ransomware-fatigue--688471000dc1ae12-c663-4d5b-9669-9dd91b47a402Wed, 03 Dec 2025 11:00:00 +0000Sweet FishRansomware fatigue is real, and it’s putting organizations at risk. In this episode of Third Party, hosts Bob Maley, Ferhat Dikbiyik, and Jeffrey Wheatman unpack why ransomware fatigue has become as dangerous as ransomware itself. They break down how...3014falsefullThe Dark Side of Cyber Report Cardshttps://www.spreaker.com/episode/the-dark-side-of-cyber-report-cards--6853556344ee561c-0284-4416-8dfb-90566404de77Wed, 12 Nov 2025 11:00:00 +0000Sweet FishToo often, businesses rely on simple grades or one-page summaries without the context needed to make informed decisions. In this episode of Third Party, Jeffrey Wheatman, Bob Maley, and Ferhat Dikbiyik explore the dark side of cybersecurity report...2779falsefullAI’s Seismic Impact on Cybersecurityhttps://www.spreaker.com/episode/ai-s-seismic-impact-on-cybersecurity--68330996d87033dd-3b77-482e-ad4b-1d47f576ea83Wed, 29 Oct 2025 10:00:00 +0000Sweet FishIn today’s episode of Third Party, Jeffrey Wheatman, Bob Maley, and Ferhat Dikbiyik dive into how artificial intelligence is reshaping third party risk management.  From generative AI tools to shadow AI, they explore both the opportunities and dangers...2669falsefullCybersecurity Metrics Boards Actually Care Abouthttps://www.spreaker.com/episode/cybersecurity-metrics-boards-actually-care-about--68147757c63eb93a-9d7e-49c7-8ec8-65e568c2cd27Wed, 15 Oct 2025 10:00:00 +0000Sweet FishCybersecurity metrics are one of the biggest challenges when reporting to executives and the board. In this episode of Third Party, Jeffrey Wheatman, Bob Maley and Ferhat Dikbiyik break down the cybersecurity metrics your board actually cares about....2498falsefullYou’ve Been Lied to About Cyber Risk Scoreshttps://www.spreaker.com/episode/you-ve-been-lied-to-about-cyber-risk-scores--67967692fca5813d-83f4-491d-af44-01dbdd54062dWed, 01 Oct 2025 10:00:00 +0000Sweet FishIf you manage third-party cyber risk, you already know the pain of black-box scores and endless frameworks that miss the point. In this episode, hosts Bob Maley, Jeffrey Wheatman, and Ferhat Dikbiyik expose the problem nobody talks about: lack of...2123falsefullThe Untold Story of Third Party Riskhttps://www.spreaker.com/episode/the-untold-story-of-third-party-risk--677949482fd0cff1-0c72-4571-aed9-5f2ee98e6116Wed, 17 Sep 2025 10:00:00 +0000Sweet FishThird Party is on a mission to pull risk out of the shadows and strip away the jargon, noise, and black-box tools that leave leaders guessing. It’s about clarity, not fear.Hosted by Bob Maley, Jeffrey Wheatman, and Ferhat Dikbiyik, this show blends...65falsetrailer