Identify supply chains

From pre-attack
Jump to: navigation, search


Identify supply chains
Technique
ID PRE-T1053
Tactic Organizational Information Gathering

Definition

Supply chains include the people, processes, and technologies used to move a product or service from a supplier to a consumer. Understanding supply chains may provide an adversary with opportunities to exploit organizational relationships.12

Difficulty for the Adversary

Easy for the Adversary (Yes/No): No

Explanation: Requires an intensive process. May be easier in certain industries where there are a limited number of suppliers (e.g., SCADA).

Detection

Detectable by Common Defenses (Yes/No/Partial): No

Explanation: Searching publicly available sources that cannot be monitored by a defender.

Similar Techniques for Other Tactics

TacticArticle
Organizational Information GatheringIdentify supply chains
People Information GatheringIdentify supply chains
Technical Information GatheringIdentify supply chains