Evolving Risks to Retail & Brand Global Supply Chain & Digital Assets

Video Summary

48% of breaches now involve a third party—up from 9% three years ago. For retailers and consumer brands, this shift isn't just a security risk; it's an operational and brand risk. Traditional supplier assessments measure posture; they don't detect the active threats already targeting your ecosystem. And even when security teams identify those threats, procurement delays mean months of exposure while solutions work through approval cycles.

‍

In this Optimal Advisory discussion, John Watters, Chairman and CEO of iCOUNTER, joins Jonathan Feeney and David Schick to examine why third-party risk has become both a security challenge and a business continuity problem. Drawing on real incidents—Target, NotPetya, Jaguar Land Rover—Watters explains how attacks spread through relationships you trust, and why the missing piece in most third-party programs is threat activity: the "T" in the Vulnerability × Threat × Impact equation.

‍

Watters makes the case for risk determination at the edge of intelligence collection: compressing the time from threat signal to remediation, rather than routing intelligence through multiple teams while attackers operate at machine speed.

‍

What's covered:

• Why supplier questionnaires and continuous monitoring have failed to actually reduce third-party risk over the past 15 years
• How AI-enabled reconnaissance makes vendors the easiest entry point into enterprises
• What operationalized threat intelligence and response actually looks like in practice
• What happens in the first 24 hours when a critical supplier is under active attack
• Why mean time to remediation (MTTR) is becoming the defining metric for third-party risk

‍

Additional information:

John Watters is Chairman and CEO of iCOUNTER. He founded iDEFENSE in 2002 (the world's first commercial cyber threat intelligence firm) and iSIGHT Partners in 2007. He stewarded both companies through acquisition by Mandiant and Google before launching iCOUNTER to address the gap between third-party risk assessment and active threat detection and response.

‍

Recorded September 9, 2026, as part of Optimal Advisory's thought leader series. Hosted by Jonathan Feeney and David Schick.