Overall Product Security Assessment Process

Supply chain attacks go unnoticed on average for 235 days and do more damage as a result of us not having a deep understanding of the products being used on a network. Product security tests help obtain a comprehensive understanding of how choosing to use a particular product in your organization can increase your attack surface and affect your threat model and risk posture. This makes product security testing vital in preparing your organization to defend and recover from software supply chain attacks.

This poster has been created as reference for the SEC568: Product Security Penetration Testing - Safeguarding Supply Chains and Managing Third-Party Risk course by the Certified Instructor Douglas McKee and Ismael Valenzuela.