Podcast

Alice in Supply Chains - Bonus Episode - DBIR 2025 with Alex Pinto

April 17, 2025

Descrição do episódio

Verizon’s 2025 Data Breach Investigations Report (DBIR) is out - and one of the top takeaways couldn’t be more clear: third-party risk is rapidly accelerating. This year, breaches involving third parties doubled compared to last year (from 15% to 30%), often driven by vulnerability exploitation and business disruptions. As the report puts it: when a vendor is hosting your data, the best strategy is to focus on how secure and resilient their environment truly is. The DBIR also highlights a shift in how organizations are addressing third-party risk. While traditional risk questionnaires remain part of the equation, the report underscores a growing need for TPCRM solutions that deliver quantifiable, actionable insights — especially those that assess real-world security controls. At Tenchi, that’s exactly where we’re focused: helping organizations achieve continuous, cooperative, and comprehensive visibility into third-party cyber risk.

Notas do show

Show Transcript

Watch or listen to full episodes in English

Recent Episodes

Episode 10

In this episode, Alexandre Sieira (CTO & Cofounder of Tenchi Security) and Adrian Sanabria (Principal Researcher at The Defender's Initiative) dive into key topics from newsletter #38, sharing expert insights on the latest in third-party cyber risk management. They discuss: -Have cybercriminals been too successful? -Jaguar Land Rover’s recent cyber struggles -The true cost of a breach -Why risk management shouldn’t stop at the company’s borders Stay tuned each month for sharp analysis and essential discussions on TPCRM challenges.

Episode 9

In this episode, Alexandre Sieira (CTO & Cofounder of Tenchi Security) and Adrian Sanabria (Principal Researcher at The Defender's Initiative) celebrate the 3rd anniversary of the Alice in Supply Chains newsletter - the very starting point for this podcast. Together, they revisit key highlights from issue #37, unpacking the stories shaping today’s supply chain security landscape: -The Salesloft “Perfect One Attack, Use Many” case -Vendors charging customers to complete security questionnaires -New CISA tools for supply chain security -The Sinqia compromise and the HSBC BRL theft Stay tuned, every month, for in-depth insights, expert analysis, and key discussions on TPCRM challenges.

Episode 8

In this episode, Alexandre Sieira, CTO and Cofounder of Tenchi Security, joins Adrian Sanabria, Principal Researcher at The Defender's Initiative, to break down three key stories from issue #36 of the Alice in Supply Chains newsletter. Together, they explore: -How third-party disruptions can derail operations; -The unusual case of Clorox vs. Cognizant; -Why relying on EU cloud regions may not guarantee data sovereignty — and Microsoft’s admission to French customers; Each conversation delivers practical insights into the fast-changing landscape of third-party cyber risk management.

View all episodes