What We'll Discuss
01
How far down the supply chain is it realistic to map, and how do you decide where to stop?
02
How do you find concentration risk when the shared provider never appears on your own supplier register?
03
What does a board need to hear about nth-party exposure, and what evidence makes that case credible?
04
What would it take for TPRM teams in the same sector to share supplier insight the way threat intelligence teams already do?
05