How to Make Your Next Third-Party Risk Conversation Less Awk