Attack scenario
Supply chain and trusted access
An adversary abuses a supplier, software dependency, external access path, or trusted relationship to bypass normal controls.
Why this scenario matters
This view connects the attack path with preventive, detective, response, and recovery controls and helps identify gaps between technologies.
The scenario uses MITRE ATT&CK® as a reference model. It is an expert SecTec interpretation and does not imply endorsement by MITRE.
Relevant ATT&CK tactics
- Defense Impairment
- Initial Access
- Lateral Movement
- Persistence
- Privilege Escalation
- Stealth
Relevant ATT&CK techniques
SecTec technologies and vendors
The following hierarchy is derived from the approved ATT&CK-to-technology and technology-to-vendor mappings.
Cloud Security
Network Security
Identity and Access Mgmt
- ABACTechnology
- IAM platformsTechnology
- Identity GovernanceTechnology
- Identity LifecycleTechnology
- IGATechnology
- JEATechnology
- JITTechnology
- MFATechnology
- PAMTechnology
- PBACTechnology
- PIMTechnology
- Proximity VerificationTechnology
- RBACTechnology
- ReBACTechnology
- Risk Based AuthenticationTechnology
- SCIMTechnology
- SSOTechnology