Security Begins at Procurement with Jessie Schofer

Episode notes

Bringing new software or SaaS into your organization is a security risk - how do you assess it? Richard chats with Jessie Schofer about her experiences in HR software acquisition, which led to the creation of secureless.ai. Jessie tells the story of evaluating various SaaS and other software products and realizing that, while the website says they are compliant with GDPR and/or SOC 2, are they really? This leads to a conversation about the product procurement process and about actually understanding the security risk you take on every time a new product is added to your organization. At what point does security block an acquisition? And after being acquired, how often do you reassess? Supply chain security hygiene starts at procurement - are you part of the evaluation? Links Secureless.ai GDPR Enforcement Tracker Recorded June 23, 2026

Related episodes across the Index

Other episodes covering the same guests and topics, from across The B2B Podcast Index.

• Lay of the Land: How Attackers Move in '26mnemonic security podcast · on supply chain attacks94 / 100
• Emre Kazim (Holistic AI): Why AI Governance is Like CybersecurityThe Road to Accountable AI · on GDPR90 / 100
• Why Digital Identity Is Broken And How Ditto Plans To Fix ItThe Business of Cybersecurity · on GDPR90 / 100
• Code War with Allie MellenAfternoon Cyber Tea with Ann Johnson · on supply chain attacks85 / 100
• Stories from an Expert Threat Hunter with Taz WakeCyber Leaders · on supply chain attacks82 / 100
• Trump's Golden Post-Quantum EO(s)Security Cryptography Whatever · on security80 / 100

• The Content Management System Landscape with Matt Garrepy80 / 100
• AI-Accelerated Supply Chain Attacks with Mackenzie Jackson83 / 100
• Ransomware Readiness with Heather Renze
• Azure Virtual Desktop Hybrid with Travis Roberts
• Finding Security Vulnerabilities using AI with Sami Laiho