---
title: "Episode 36: Attributes of a Robust Third Party Risk Management Program with CISO Ross Young"
description: Episode 36 of the podcast covers the attributes of a robust third-party risk management program including how to use threat intelligence to inform actionable outcomes
---

<https://blog.nisos.com/podcast>

# [Episode 36: Attributes of a Robust Third Party Risk Management Program with CISO Ross Young](https://blog.nisos.com/podcast/cyber5_episode36_robust_third_party_risk_program)

 Written by [Nisos](https://blog.nisos.com/podcast/author/nisos) | Dec 17, 2020 8:38:30 PM

Episode 36 of the podcast covers the attributes of a robust third-party risk management program including how to use threat intelligence to inform actionable outcomes with third parties with CISO of Caterpillar Financial Ross Young.

 

**Outline:**

- **Question 1 (01:25)** Within your threats and safeguards matrix, you identify vendor and partner data as a major threat. How do you rank order each vendor and what are risk factors of vendors you assess?
- **Question 2 (05:33)** How does cyber threat intelligence play a factor?
- **Question 3 (06:44)** What are the critical, actionable outcomes you are looking for with threat intelligence as it pertains to TPRM?
- **Question 4 (11:15)** Are you using threat intelligence to inform other threats to the business such as compliance, financial, HR, or legal?
- **Question 5 (14:00)** What’s the best advice you would give to people coming out of the IC and want to be CISOs?

 

 

 

 

[View full post](https://blog.nisos.com/podcast/cyber5_episode36_robust_third_party_risk_program)

```json
{
  "@context" : "http://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "Nisos"
  },
  "dateModified" : "2021-01-24T14:39:40.256Z",
  "datePublished" : "2020-12-17T20:38:30Z",
  "headline" : "Episode 36: Attributes of a Robust Third Party Risk Management Program with CISO Ross Young",
  "image" : {
    "@type" : "ImageObject",
    "height" : 405,
    "url" : "https://f.hubspotusercontent30.net/hubfs/6068438/Podcast__Logo%20%28TM%29%20+%20Nisos-Jul-24-2020-08-54-06-70-AM.png",
    "width" : 720
  },
  "mainEntityOfPage" : "https://blog.nisos.com/podcast/cyber5_episode36_robust_third_party_risk_program",
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "height" : 60,
      "url" : "/hs/hsstatic/content_shared_assets/static-1.4092/img/default-amp-logo.png",
      "width" : 60
    },
    "name" : "Podcast"
  }
}
```