Episode 20: Third-Party Cyber Risk: How to Protect Your Supply Chain with Jeffrey Wheatman

In this episode of Oh Hell No…Not My Data, host Keisha Bent sits down with cybersecurity and cyber risk expert Jeffrey Wheatman of Black Kite to unpack one of today’s biggest business challenges: third-party cyber risk and supply chain security. They explore why traditional vendor risk assessments are no longer enough, how cyber incidents can cascade across physical and digital supply chains, and why continuous monitoring and collective resilience matter more than ever.

Jeffrey shares practical insights on third-party risk management, including how to identify critical vendors, manage fourth-party risk, strengthen vendor contracts, prepare for ransomware and other cyber incidents, communicate cyber risk to executives and boards, including a few tips on off-boarding vendors. The conversation also examines how AI can transform vendor risk monitoring, data analysis, and risk discovery.

Whether you work in cybersecurity, risk management, GRC, vendor management, procurement, or business leadership, this episode offers actionable strategies for building a more resilient supply chain and managing cyber risk before disruption hits.