Supplier Security Testing

How can you find out what rights and capabilities suppliers have in the company environment?

Companies often do not have a clear overview of what suppliers can actually do in their environment.

Is a formal declaration from a supplier enough, or is active testing also necessary?

A paper declaration from a supplier alone is not enough to verify security.

What can testing look like, from a simple assessment to a simulated attack?

Testing can take the form of a simple assessment or a simulated attack scenario.