Measuring supplier risk from outside instead of by questionnaire
An annual supplier questionnaire starts ageing the moment the contract is signed. The externally visible surface can be measured continuously.
Blog
Notes from the team
Short answers to questions we meet in the field: reading stealer logs, catching typosquats, managing IOCs, closing cases. Research, operations and product notes.
Executive protection: the most expensive form of impersonation
Fake executive accounts exploit hierarchy, not a technical flaw. That is why technical controls do not stop them.
Who is going to read this threat intelligence report?
The same finding cannot be told to a SOC analyst and a board in one document. A report that does …
Limits of processing leaked data under Turkish data protection law
Examining leaked data does not mean storing it without limit. Purpose, retention and access must be written down up front.
Sanctions lists and supply chain intelligence
When a supplier's jurisdiction changes, so does its risk profile. That is a signal the security team should track too.