Nexor Supply Chain Security

Nexor Supply Chain Security is an advisory service that helps organizations identify and manage security risks introduced through third-party suppliers and vendors. The service focuses on providing visibility into multi-tier supply chains to assess vulnerabilities that exist beyond an organization's direct control. The service combines Nexor's internal supply chain security experience with threat intelligence from partners Lab 1 and Craft. It uses an information fusion approach to analyze exposed data entities across the clear web, dark web, deep web, and messaging applications. The service employs AI-assisted analysis to process breached data and identify direct and indirect data exposures. Nexor's consultants conduct audits using NCSC approved frameworks to assess compliance with legal, contractual, standards, and policy requirements. They perform cyber vulnerability investigations using a socio-technical approach to identify evidence-based risks. The service includes threat hunting and analysis through Open Source Intelligence (OSINT) and dark web searches. The deliverable is a Supply Chain Assurance Report that provides holistic profiles on public and private companies, highlighting issues such as unethical labor practices, regulatory violations, IP theft, and economic risks. The report identifies dependencies and determines associated threats and vulnerabilities that could present risks through the supply chain. The service is configurable to customer requirements and follows a defense-in-depth approach to supply chain security management.