Alice in Supply Chains - o Podcast!

In this episode, Alexandre Sieira, CTO and Cofounder of Tenchi Security, joins Adrian Sanabria, Principal Researcher at The Defender's Initiative, to break down three key stories from issue #36 of the Alice in Supply Chains newsletter. Together, they explore: -How third-party disruptions can derail operations; -The unusual case of Clorox vs. Cognizant; -Why relying on EU cloud regions may not guarantee data sovereignty — and Microsoft’s admission to French customers; Each conversation delivers practical insights into the fast-changing landscape of third-party cyber risk management.

In today’s new episode, Alexandre Sieira, CTO and Cofounder of Tenchi Security, joins Adrian Sanabria, Principal Researcher at The Defender's Initiative, to unpack three critical stories from issue #35 of the Alice in Supply Chains newsletter. They discuss Scattered Spider’s shift toward aviation and transportation targets, the tragic link between a cyberattack and a patient death in the NHS, and the impact of a cyber incident involving a Brazilian tech provider on financial institutions' reserve accounts. Each episode delivers sharp, practical insights into the rapidly evolving world of third-party cyber risk management.

In this special bonus episode, Alexandre Sieira, CTO and Co-founder of Tenchi Security, and Adrian Sanabria, Principal Researcher at the Defender's Initiative, sit down with AJ Yawn - Director of GRC Engineering at Aquia, author of GRC Engineering for AWS, and host of CyberTakes. Together, they take a deep dive into SOC 2 and its fate - exploring challenges, limitations, why it’s become so popular - and what the future holds. It’s a timely and important discussion for anyone interested in cyber risk management.

Join Alexandre Sieira, CTO and Co-Founder of Tenchi Security, and Adrian Sanabria, Principal Researcher at the Defenders Initiative, as they break down the most important stories from Issue #33 of the Alice in Supply Chains newsletter. In this episode, the duo explore why EU businesses are increasingly turning away from U.S. cloud providers, key takeaways from the UK ICO’s investigation into the 2022 NHS breach, and what the infamous "Hanoi rat massacre" can teach us about modern risk practices. They also dive into JPMorgan's CISO Pat Opet’s open letter, which calls for stronger SaaS security and takes aim at weak integration models in today’s interconnected systems.

Join Alexandre Sieira, CTO and Co-Founder of Tenchi Security, and Adrian Sanabria, Principal Researcher at the Defenders Initiative, as they break down the most important stories from Issue #33 of the Alice in Supply Chains newsletter. In this episode, the duo explore why EU businesses are increasingly turning away from U.S. cloud providers, key takeaways from the UK ICO’s investigation into the 2022 NHS breach, and what the infamous "Hanoi rat massacre" can teach us about modern risk practices. They also dive into JPMorgan's CISO Pat Opet’s open letter, which calls for stronger SaaS security and takes aim at weak integration models in today’s interconnected systems.

Verizon’s 2025 Data Breach Investigations Report (DBIR) is out — and one of the top takeaways couldn’t be more clear: third-party risk is rapidly accelerating. This year, breaches involving third parties doubled compared to last year (from 15% to 30%), often driven by vulnerability exploitation and business disruptions. As the report puts it: when a vendor is hosting your data, the best strategy is to focus on how secure and resilient their environment truly is. The DBIR also highlights a shift in how organizations are addressing third-party risk. While traditional risk questionnaires remain part of the equation, the report underscores a growing need for TPCRM solutions that deliver quantifiable, actionable insights — especially those that assess real-world security controls. At Tenchi, that’s exactly where we’re focused: helping organizations achieve continuous, cooperative, and comprehensive visibility into third-party cyber risk.

Alice in Supply Chains is a monthly podcast by Tenchi Security based on the Alice in Supply Chains newsletter, that provides interesting discussions and expert insights on all things related to third-party cyber risk management (TPCRM). It's hosted by two leading voices in the industry, Tenchi Security's CTO and Co-Founder Alexandre Sieira & The Defender's Initiative Principal Researcher, Adrian Sanaria, and it promises expert opinions and takeaways to help audiences navigate the complex cybersecurity landscape. This episode is based on the content of newsletter issue #32, published on April 17, 2025. Check out the full material for more stories, links and details! Themes discussed in this episode: Oracle breaches: from denial to lawsuit GitHub Action Hacked: Lessons Learned

The third episode of our Alice in Supply Chains Podcast is now live! On it, two industry experts in third-party cyber risk management, Alexandre Sieira and Adrian Sanabria, come together to share valuable insights and in-depth analysis on the latest TPCRM news - covered on issue #31 of our monthly newsletter, Alice in Supply chains, released earlier this week!

The second episode of the Alice in Supply Chains Podcast is now live! On it, two leading voices in third-party cyber risk management, Alexandre Sieira and Adrian Sanabria, come together to provide expert commentary and in-depth analysis on the latest TPCRM news.

Starting this month, Alice in Supply Chains expands beyond the newsletter to bring you exclusive video commentary and expert analysis from two leading voices in third-party cyber risk management: our CTO and Co- Founder, Alexandre Sieira, and The Defender's Initiative Principal Researcher, Adrian Sanabria. Through monthly episodes, the Alice in Supply Chains Podcast will provide interesting discussions and expert takeaways based on the latest news covered by the newsletter itself - offering you an objective analysis to stay informed and ahead on all things related to TPCRM.