This interview covers an auditor's perspective on how organizations are addressing third party risk management, best practices for managing risk, addressing today's cybersecurity threats and risks, top areas of concern for a SOC audit report, the importance of your subservice vendors (aka your vendor's vendor or fourth party), pre-contract considerations, vendor oversight and how vendor risk management training at the board level helps.