Supply Chain Security

More and more IT departments are transforming into a management organization. The vast majority of the work is carried out by suppliers. This means that the number of supply chains is growing and that these chains are getting longer, resulting in a greater risk of data breaches. Cert2Connect is therefore working on Third Party Risk Management (TPRM). In that context, we are amply familiar with the well-known NIST Cyber security Framework, a series of crystallized guidelines for limiting cyber securityrisks.

Solution

Reflectiz

Reflectiz

3rd party apps risk management of your (e-commerce) website. Having control over all code of the website as it runs in the visitor's browser. No more blind spots!

Solution

Rescana

Rescana Attack Surface And Third Party Risk Management, offering companies the certainty that they have control over the risks arising from cooperation with suppliers.

Solution

Cymulate

Is your IT infrastructure safe? Do you check this with pen testing or red teaming?
Breach & Attack Simulation (BAS) and you'll know right away!

Continuous offensive security validation across the entire attack chain.

Solution

Kela

Cyber Threat Intelligence

Mitigate digital crimes with real intelligence.

KELA scans the Dark Web

Solution

Oligo

REIMAGING APPLICATION THREAT ASSESSMENT, DETECTION & RESPONSE Oligo is making it fast and easy to discover genuinely exploitable vulnerabilities and block active exploits in any cloud-native...

Service

CISO-as-a-Service

The specialists at Cert2Connect have years of experience in cyber and cloud security. With our certified expertise, we can help take cyber securityin your organization to the next level.

Learn more

Main Security Features

A solution like Rescana responds nicely to this. This Cyber Risk Management SaaS platform identifies and manages the risks in collaborations with third parties. The tool does this by sending out digitized interrogators. These analyze what is found on the web – dark web, deep web – about your own company, websites or servers.

In this way, the experts of Cert2Connect regularly discover in practice that dozens of data leaks have been detected at suppliers of customers. Sometimes data is even leaked there.

It is important to continuously check the footprint of third parties. This also applies, of course, to the software supply chain and to data protection in general. Anyone who closely monitors the entire supply chain is always up-to-date in terms of compliance with GDPR, NIS2 or other guidelines. Everything is connected in cyber security. Therefore, the tools we deploy overlap certain services and services. Our portfolio is composed in such a way that it covers cyber security across the board.

Supply Chain Security Blog

Blog Page

DORA Compliance: Digitale Weerbaarheid voor de Financiële Sector

De Digital Operational Resilience Act (DORA) is een Europese wetgeving die de digitale weerbaarheid van financiële instellingen naar een hoger niveau tilt. Na het lezen van deze tekst weet je precies wat DORA inhoudt, wie moet voldoen, welke eisen gelden en hoe Cert2Connect organisaties ondersteunt bij compliance en cyberweerbaarheid.

Focus Supply Chain Security

Leeds United slachtoffer van cyberaanval op fanshop

In februari 2025 werd Leeds United, een bekende Engelse voetbalclub, getroffen door een gerichte cyberaanval op hun officiële online fanshop. Hoe had dit voorkomen kunnen worden?

Focus Supply Chain Security

How is web skimming carried out?

Web skimming attacks are essentially supply chain attacks on software that can reach hundreds or thousands of websites using the exploited third-party web application. Since third-party...

Focus Supply Chain Security

De digitale valkuilen van leveranciers-management

De digitale valkuilen van leveranciersmanagement Auteur: Tiennot van Dilst, CISSP, CEH, CIPP/e, CxCE, CTO / Security Expert Jarenlang heb ik verschillende bedrijven mogen helpen tijdens het...

Focus Supply Chain Security

Alles wat je moet weten over webskimming-aanvallen

Alles wat je moet weten over webskimming-aanvallen

Web skimming, ook bekend als digital skimming, is een hacktechniek die zich richt op digitale bedrijven door niet-gecontroleerde en gecompromitteerde webapplicaties aan de browserzijde te manipuleren. Meestal worden deze aanvallen geïnitieerd door kwaadaardige JavaScript-code (JS) strategisch op betaal- en afrekenpagina's van de website te plaatsen en waar nietsvermoedende gebruikers hun persoonlijke en financiële gegevens invullen. Hoewel ze vaak te vinden zijn op eCommerce-websites, worden tegenwoordig ook banken, financiële dienstverleners, gezondheidszorg, toerisme en andere eService-platforms aangevallen.

Focus Supply Chain Security