Identify supply chains
Supply chains include the people, processes, and technologies used to move a product or service from a supplier to a consumer. Understanding supply chains may provide an adversary with opportunities to exploit organizational relationships.  
Tactic: Organizational Information Gathering
Similar Techniques by Tactic
|Technical Information Gathering||Identify supply chains|
|People Information Gathering||Identify supply chains|
DetectionDetectable by Common Defenses (Yes/No/Partial): No
Explanation: Searching publicly available sources that cannot be monitored by a defender.
Difficulty for the AdversaryEasy for the Adversary (Yes/No): No
Explanation: Requires an intensive process. May be easier in certain industries where there are a limited number of suppliers (e.g., SCADA).
- Drew Smith. (2015). Is your supply chain safe from cyberattacks?. Retrieved March 5, 2017.
- CERT-UK. (2016, October 01). Cyber-security risks in the supply chain. Retrieved March 5, 2017.