Supply Chain.
A Supplier is a third party your Organization depends on. Suppliers work much like Assets, with a few differences: they are not hosted by you, and instead of a hosting location they carry a domain and a criticality. Tracking them lets Liberty91 watch your supply chain and surface the threats that reach you through third parties.
How to add Suppliers
You have two ways to populate your Supplier list:
- Manually. In the Supply Chain menu, click Add supplier, then enter the name, criticality, and domain.
- From a Document. Upload a Document and Liberty91 detects and extracts the Suppliers for you, which is easier than adding them one at a time.
The Third Party Threat Profile
Once you create a Supplier, Liberty91 finds all the relevant reporting for it and writes a description, then keeps that knowledge current, the same way it does for Assets and for the Threat Actors, malware, and vulnerabilities in your Threat Library. Each of these descriptions is a Third Party Threat Profile in its own right.
Frequently asked questions
How do Suppliers differ from Assets?
Suppliers are not hosted by your Organization. Instead of a hosting location they have a domain and a criticality, but otherwise they behave like Assets.
What is a Third Party Threat Profile?
The maintained description Liberty91 writes for each Supplier from the latest relevant reporting, kept current automatically the same way an Asset Threat Profile is.