Gaining buy-in from suppliers is a major challenge in third-party risk management, often leading infosec teams to rely on scanning software instead of obtaining crucial self-reported information. This talk will demonstrate how slight process adjustments, improved supplier interactions, and the right tools can transform vendors from a risk management nightmare to a valuable asset.