Castuner
Submit a podcast

Third Party

Sweet Fish

If you manage third-party cyber risk, you’ve seen it all: meaningless scorecards, black-box tools, and endless frameworks that never quite connect to business impact. Third-Party is the podcast built for the people behind the dashboards. The ones managing 5,000 vendors with a team of three. Hosted by Jeffrey Wheatman, Ferhat Dikbiyik, and Bob Maley, this show unpacks what actually works (and what doesn’t) in TPRM. No fear tactics. No buzzwords. Just unfiltered conversations, sharp insights, and the occasional roast of a really bad SIG questionnaire. If you’ve ever had to explain cyber vendor r

Podcast website

Listen in your app

Episodes

28 episodes

  1. Concentration Risk and the Vendors You Never Chose 37:57
  2. Is AI the End of Humanity or Just Another Y2K? 37:11
  3. Are Your Vendors Lying to You? 35:45
  4. The AI Scanner Hype Test 37:10
  5. Your TPRM Program Isn't Fixable 37:43
  6. You Can't Say No to Your Vendors 41:09
  7. Why Manufacturing Supply Chains Are Ransomware’s Favorite Target 33:29
  8. The #1 Mistake Boards Make on Cyber Risk 32:30
  9. The Hidden Signals Predicting Vendor Collapse 37:12
  10. Mythos Hype Check: TPRM Paradigm Shift or Big Nothing Burger 45:29
  11. Are You Measuring the Right Risks…Or Just the Easiest Ones? 31:30
  12. Why Automation Is Creating More Cyber Risk 34:13
  13. How to Calculate the Real Cost of a Third-Party Breach 40:02
  14. Vendor Sprawl Is Out of Control (Here’s How the Best Teams Fix It) 38:58
  15. What You Should NEVER Automate in Risk Programs 37:39
  16. Is Cybersecurity Regulation Actually Dangerous? 56:12
  17. The Real Meaning of “C” in TPCRM 42:08
  18. Whose Breach Is It Anyway? 42:39
  19. The Biggest Lie in Cybersecurity 39:51
  20. The Truth About AI in Risk Management 43:20
  21. Why 2026 Might Be the Hardest Cyber Year Yet 51:34
  22. This Is Why Third-Party Risk Never Ends 50:48
  23. How to Beat Ransomware Fatigue 50:14
  24. The Dark Side of Cyber Report Cards 46:19
  25. AI’s Seismic Impact on Cybersecurity 44:29
  26. Cybersecurity Metrics Boards Actually Care About 41:38
  27. You’ve Been Lied to About Cyber Risk Scores 35:23
  28. The Untold Story of Third Party Risk 1:05