Third-party and supply chain risk management: vendor assessments, SBOMs, contracts and right to audit

Much of your risk now sits with other companies: cloud providers, SaaS vendors, managed service providers, software suppliers and the open-source components inside your own code. A supply chain compromise can reach thousands of customers at once, so third-party risk management is a core senior responsibility.