How CISOs manage third Parties. A discussion on risk, governance, and contract considerations. Kevin Johnson joined the conversation.