Service Overview

The risk assessment of Supply Chain analyses the cyber exposure introduced by suppliers, technological partners and third parties with access to the organization’s systems or data. A compromised supplier is today one of the most exploited attack carriers to achieve otherwise well protected objectives, and is an area explicitly recalled by the requirements of Directive NIS2 for essential and important subjects.

How we work

We manipulate critical suppliers based on the level of access granted and the type of data processed, evaluate their safety posture with targeted verifications (public exposure, certifications, historical accidents) and produce a risk report by supplier, with recommendations on security contracting, compensatory checks and continuous monitoring to be included in the process of vendor management.

---