All posts and images can be found on CISO Series.

Check out this post for the discussion that is the basis of our conversation on this week’s episode co-hosted by me, David Spark, the producer of CISO Series, and Geoff Belknap. Joining us is Steve Knight, former CISO, Hyundai Capital America.

In this episode:

Streamlining vendor evaluations
Moving beyond compliance theater
The scorecard skeptics
Finding the right balance

Thanks to our sponsor, Formal

Formal secures humans, AI agent’s access to MCP servers, infrastructure, and data stores by monitoring and controlling data flows in real time. Using a protocol-aware reverse proxy, Formal enforces least-privilege access to sensitive data and APIs, ensuring AI behavior stays predictable and secure. Visit joinformal.com to learn more or schedule a demo.

What's the Most Efficient Way to Rate Third Party Vendors? 28:27 Share

Defense in Depth

Shownotes Transcript

What's the Most Efficient Way to Rate Third Party Vendors?