Offensive Threat Models Against the Supply Chain
At VerSprite, we approach security from a holistic risk management perspective, understanding security from business and attacker perspectives. Our approach goes beyond assessing security controls, and examines credible threats to understand the likelihood of a real-world abuse case, and measuring the magnitude of business impact if a breach should occur. By developing a holistic business/IT risk view, security decisions become business decisions.