As third-party threats become increasingly sophisticated, it’s taking more time for organizations to find and remediate third-party risk.