Your security is only as strong as your least secure vendor's fourth-party subcontractor. It's an uncomfortable truth, but one every risk leader needs to sit with. In today's hyper-connected economy, your organization doesn't just depend on its own controls — it depends on the controls of every vendor, partner, and cloud provider in its ecosystem. And those vendors, in turn, depend on their vendors. One weak link, three tiers removed from your direct line of sight, can trigger a breach, a...