Cybersecurity and Third-Party Risk
Third-Party Threat Hunting
Wiley · 2021
The first book: building a third-party risk program that holds up, with Zero Trust principles applied to vendor threat mitigation.
Buy →Insights · Books
Four books on third-party, Zero Trust and AI risk.
Published by Wiley and Apress between 2021 and 2026, and used as the reading list for TPTH courses and by TPRM programs.
Zero Trust and Third-Party Risk
Reduce the Blast Radius
Wiley · 2023
Implementing Zero Trust across the vendor estate so that a third-party compromise stops at the vendor.
Buy →
Privileged Access Management
Strategies for Zero Trust in the Enterprise
Apress · 2025 · with Maria C. Rasner
Privileged access as the control that decides how far an intrusion travels. Co-authored with Maria C. Rasner.
Buy →
AI & Third-Party Risk
Strategies for Success with Your AI-Enabled Vendors and Partners
Apress · 2026
Assessing AI vendors and AI-enabled third parties: model provenance, data use, contracts and the control set to assess them against.
Buy →Forthcoming
GRC and AI: How to Tame the Risk
A fifth book is due from Apress in early 2027.
Used in TPTH courses
The books form the reading list for AI for TPRM Professionals and the CATRP credential. Bulk and instructor copies: get in touch.