Company

ABOUT ESENTIRE

eSentire is The Authority in Managed Detection and Response Services, protecting the critical data and applications of 2000+ organizations in 80+ countries from known and unknown cyber threats. Founded in 2001, the company’s mission is to hunt, investigate and stop cyber threats before they become business disrupting events.

About Us →

Leadership →

Careers →

Event Calendar →

Newsroom →

EVENT CALENDAR

Nov

SkyHigh Cook Out

Dec

TechTalk Soho House Dinner, Chicago

Dec

December TRU Intelligence Briefing

Jan

Security Leaders Dinner, Denver

Jan

FutureCon Los Angeles

View Calendar →

LATEST PRESS RELEASE

Aug 09, 2024

eSentire Expands Partnership with TD SYNNEX to Bring eSentire’s Award-Winning, 24/7 MDR and SOC Services to Organizations Across North America

Waterloo, Ontario, August 12, 2024 — eSentire, a leading global Managed Detection and Response (MDR) provider, today announced it has expanded its partnership with TD SYNNEX, a leading global distributor and solutions aggregator for the IT ecosystem. eSentire’s all-in-one, 24/7…

View Newsroom →

THIRD-PARTY CYBER RISK

Protection From Supply Chain and Third-Party Cyber Risk

As a security leader, you need to be aware of the potential cyber risks that arise every time an external party is granted privileged access to your systems. eSentire helps assess your third-party cyber risk and offers 24/7 support for rapid threat detection, threat hunting and complete threat containment in minutes, before your business is disrupted.

GET STARTED

Identify the risk of being impacted by a third-party breach

Protection from threat actors leveraging third-party vendors for cyberattacks

SUPPLY CHAIN AND THIRD-PARTY CYBER RISK BY THE NUMBERS

45%

of organizations experienced a third-party security incident in the last year¹

84%

of third-party incidents result in operational disruption²

108DAYS

The average time between an attack and the disclosure was 108 days in 2022³

1. Prevalent, Third Party Risk Management Industry Study, 2022
2. Gartner, Annual ERM Survey, 2023
3. Black Kite, Third Party Breach Report, 2023

How Do You Assess Vendor Risk?

Most organizations rely on a highly interconnected environment of vendors, suppliers, partners and service providers to extend their capabilities and scale operations. To address the growing third-party cyber risks, you need to strategically assess every vendor with privileged access to your systems, networks, and data. Start by asking yourself:

Do I have formal procedures to manage cyber risks associated with third-party access to my environment and data?
Have I thought about the supply chain in my vendors’ ecosystems and who else may have access to my data?
How can I ensure my data is protected if my third-party vendors are compromised?

The cost of a third-party breach is not just measured in short-term financial loss and lost productivity, but also in long-term reputational damage and client churn.

The best way to protect your company from a devastating breach is to avoid one in the first place – conduct the due diligence needed and have the right protection in place.

How eSentire Protects Against Supply Chain and Third-Party Cyber Risk

We can help with third-party cyber risk due diligence with our Vendor Risk Assessments and provide ongoing 24/7 protection with eSentire Managed Detection and Response (MDR).

eSentire Vendor Risk Assessment

eSentire Managed Detection and Response

KEY CHALLENGE

Proactively identify the risk of a supply chain or third-party breach.

HOW WE HELP

Develop and update your third-party risk management program.
Evaluate third-party cyber risk leveraging our 15-point security program assessment.
Develop a cyber risk management plan and become more resilient to third-party breaches.

KEY CHALLENGE

Protect your business from threat actors leveraging your third-party vendor(s) to bypass traditional security controls.

HOW WE HELP

Get multi-signal visibility enabling deeper correlation and threat investigation capabilities proven to contain threats faster.
Gain 24/7 protection with proactive threat hunting and disruption facilitated by our SOC Cyber Analysts and Elite Threat Hunters. Automatically disrupt threats in real time with our open XDR platform.
Stay ahead of the most advanced threats with original threat research and novel ML detection models developed by our world-class Threat Response Unit (TRU).

Consider the Three Ps of Third-Party Risk:
Policies, Prevention, and Promises

Threat actors often target critical service providers that are known to be trusted vendors, because if the attack is successful, they gain access to a downstream client base. Therefore, organizations need to bake security, by design, into their programs, products, and services.

To reduce your cyber risks, you need to assess the vulnerabilities and weaknesses of any third-parties that you rely on. So, consider the three Ps of third-party risk:

Policies

MINIMIZE

Define Supply Chain Policies
Develop Due Diligence Tools
Establish Periodic Validation
Raise Security Awareness
Encourage Improvement

Understand what data you’re willing to share and the type of access you’re willing to provide to a vendor. These policies should be established before you engage with a potential third-party vendor.

Prevention

MEASURE

Identify Assets and Obligations
Define Risk Appetite
Conduct Risk Assessments
Analyze Results and Risks
Define Defensive Requirements

Identify the risks that may arise as a result of the policies. Then, work with your vendor(s) to establish the minimum security requirements needed to mitigate the risks and protect your business from potential cyber threats.

Promises

MITIGATE

Contractual Obligations
Demark Responsibilities
Establish Minimum Standards
Document Notifications
Representations/Warranties

Ensure that your vendor contracts consider how and when breaches will be disclosed, how breach information will be logged and shared, and who will be responsible for the remediation, forensic analysis, and damages.

Supply Chain and Third-Party Cyber Risk FAQ

View Now

Supply Chain and Third-Party Cyber Risk FAQ

What is supply chain and third-party cyber risk?

Your organization likely relies on a highly interconnected environment of vendors, suppliers, partners and service providers to extend your capabilities and scale your operations. There are cyber risks every time an external party is granted privileged access to your systems. To address the growing supply chain and third-party cyber risks, you need to strategically assess every vendor with privileged access to your systems, networks, and data.

How does my supply chain contribute to third-party cyber risk?

Your operation likely requires sharing sensitive data with multiple external parties in your supply chain. Each time the data is shared, there's an increase in the potential for unauthorized access or breaches. Additionally, the interconnectedness of your supply chain can make it difficult to entirely control the cybersecurity measures in place across all parties.

How do eSentire Vendor Risk Assessments help protect against supply chain and third-party cyber risk?

eSentire Vendor Risk Assessments play a crucial role in identifying the risk of a supply chain or third-party breach. The assessment is built on the foundation of NIST to help develop and update your third-party risk management program and involves a comprehensive evaluation of third-party cyber risks using a 15-point security program assessment. It also helps your organization develop a cyber risk management plan and become more resilient to third-party breaches.

How does eSentire Managed Detection and Response (MDR) help protect against supply chain and third-party cyber risk?

eSentire Managed Detection and Response (MDR) helps shield your business from threat actors seeking to exploit your supply chain and third-party vendors to bypass standard security protocols. By providing multi-signal visibility, eSentire MDR correlates multi-signal telemetry and investigates potentially malicious activity, thereby containing threats faster. MDR is facilitated by our SOC Cyber Analysts and Elite Threat Hunters, operates 24/7, proactively hunting for threats and using our open XDR platform to disrupt them in real time. eSentire MDR helps your organization stay ahead of emerging threats with original threat research and novel machine learning detection models developed by our world-class Threat Response Unit (TRU).

Identify Your Risk of A Third-Party Breach

As a security leader, you must account for the lack of visibility and reduced end-to-end control the presence of third-party vendors has on your overall attack surface. eSentire is here to minimize your third-party risk with Exposure Management and Multi-Signal MDR services.

eSentire Vendor Risk Assessment

Lack of visibility and end-to-end control of vendor security practices increase the potential attack surface that your organization must consider.

eSentire’s Vendor Risk Assessment is built on the foundation of NIST and is designed to help resource-constrained organizations to:

Determine risk identification and measurement criteria
Categorize assessment data access against your organization’s risk appetite
Develop questionnaires for assessment
Conduct comprehensive assessments
Analyze data with comparisons against risk categorizations
Define corrective actions for risky third-parties and vendors
Determine defensive adjustments to mitigate your risk

READ THE DATA SHEET

eSentire Multi-Signal MDR

eSentire is the Authority in Managed Detection and Response, protecting the critical data and applications of 2000+ organizations in 80+ countries from known and unknown cyber threats. With eSentire in your corner, you can anticipate, withstand and recover from even the most sophisticated cyberattacks so you can build a more resilient security operation.

With eSentire MDR, you get:

24/7 Always-on Monitoring, Threat Hunting, and Threat Disruption & Containment
Mean Time to Contain: 15 Minutes
Open, Cloud-Native XDR Platform
Multi-signal Coverage and Visibility
Automated Blocking
Proactive Manual Threat Containment and Response
Threat Advisories & Thought Leadership
eSentire Cyber Resilience Team – 24/7 SOC Cyber Analysts, Elite Threat Hunters, Threat Response Unit (TRU), and a named Cyber Risk Advisor
Operational Reporting with 24/7 Insight Portal access

READ THE DATA SHEET

eSentire Third-Party Cyber Risk Management In Action

CASE STUDY: Fraudulent Transaction Illuminates Third-Party Risk

eSentire was engaged by a financial services firm to conduct third-party cyber risk assessments.

The firm previously failed an audit due to a fraudulent transaction from a compromised third party. Realizing the potential implications of a repeat issue, the client contracted eSentire’s Virtual CISO (vCISO) services, specifically a Third-Party Risk Assessment.

Read the full story on how eSentire executed tailored risk assessments that resulted in operational cost savings for this firm.

Read Now →

CASE STUDY: Third-Party Serves as Staging Point for Cryptojacking Attack Using Powershell

eSentire observed an unknown threat actor attempting to deploy Monero cryptocurrency mining malware to multiple customers. This increasingly common type of attack known as “cryptojacking” allows a hacker to leverage the computing power of devices to mine cryptocurrencies, unbeknownst to the victim.

Following an investigation from eSentire’s SOC, it was determined that the threat actor was leveraging a zero-day vulnerability in Kaseya’s Virtual Systems Administrator (VSA) agent to gain access to the clients’ network.

Read this case study to learn how eSentire remediated the attack.

Read Now →

WE OWN THE R IN MDR: The Kaseya Zero-Day Attacks

Watch this video with one of eSentire’s Elite Threat Hunters, Spence Hutchinson, as he reviews the Kaseya VSA supply chain attacks. Spence outlines how eSentire’s Security Operations Center (SOC) and Threat Response Unit (TRU) were able to quickly respond on our customer’s behalf and notify Kaseya of the breaches.

Modern Threat Response

In these attacks, threat actors leveraged zero-day vulnerabilities to push Cryptomining malware and ransomware to Kaseya VSA customers. Our proprietary BlueSteel Machine Learning Engine identified malicious Powershell commands being executed. eSentire’s actions to detect, respond and remediate these attacks demonstrate the importance of MDR services that go beyond alerting and host isolation to deliver complete & robust response.

WATCH NOW →

Security Leaders Count on eSentire to Prevent Business Disruption

Michael S.

Enterprise Company

READ THE FULL REVIEW →

Best money I have ever spent on Infosec

Chris T.

Enterprise Company

READ THE FULL REVIEW →

eSentire excels with advanced threat detection, real-time monitoring, MDR services, customized security, 24/7 SOC, and proactive threat hunting."

David P.

Mid-Market Company

READ THE FULL REVIEW →

You can depend on the eSentire team at any time and situation. They're a strong SOC team, capable of quickly assessing the severity of an incident and taking appropriate action.

Verified Customer

Financial Services

READ THE FULL REVIEW →

eSentire takes care of all the work! I request what I need and Boom, its done! I check the dashboard regularly just to keep an eye out on things, but i feel safe knowing they have my back.

Verified Customer

Electrical/Electronic Manufacturing

READ THE FULL REVIEW →

It is a complete system, the support is excellent. I like that they can isolate a resource at 2:00 AM without waking me up.

Verified Customer

Utilities

READ THE FULL REVIEW →

ESENTIRE SERVICES

Managed Detection and Response

All-In-One MDR Solution →

MDR for Microsoft →

MDR for GenAI →

Digital Forensics and Incident Response

Exposure Management Services

PLATFORM, PEOPLE AND RESPONSE

Security Operations Center (SOC)

Extended Detection and Response (XDR)

Technology Integrations

Threat Response Unit (TRU)

Cyber Resilience Team

Response and Remediation

24/7 MDR SIGNALS

Endpoint

Network

Log

Cloud

Identity

INDUSTRIES

Insurance

Construction

Finance

Legal

Manufacturing

Private Equity

Healthcare

Retail

Food Supply

Government and Education

Automotive Dealerships

USE CASES

Ransomware

Cybersecurity Compliance

Zero Day Attacks

Cloud Misconfiguration

Third-Party Risk

Do More With Less

Cyber Risk

Cyber Insurance

Sensitive Data Security

Security Leadership

Cyber Threat Intelligence

MDR Pricing

From The Blog

Bored BeaverTail & InvisibleFerret Yacht Club – A Lazarus Lure Pt.2

Bored BeaverTail Yacht Club – A Lazarus Lure

Cybersecurity Spending: Where to Allocate Your Budget in 2025

Resources

Case Studies

TRU Intelligence Center

Cybersecurity Tools

Videos

Reports

Webinars

Data Sheets

Real vs. Fake MDR

Compare MDR Vendors

Blogs

Security Advisories

SECURITY ADVISORIES

PoC Released for Citrix Vulnerabilities

FortiManager Zero-Day Vulnerability (CVE-2024-47575)

ABOUT ESENTIRE

About Us →

Leadership →

Careers →

Event Calendar →

Newsroom →

EVENT CALENDAR

SkyHigh Cook Out

TechTalk Soho House Dinner, Chicago

December TRU Intelligence Briefing

Security Leaders Dinner, Denver

FutureCon Los&nbsp;Angeles

LATEST PRESS RELEASE

eSentire Expands Partnership with TD SYNNEX to Bring eSentire’s Award-Winning, 24/7 MDR and SOC Services to Organizations Across North America

PARTNER PROGRAM

Search our site

Extended Detection and
Response (XDR)

FutureCon Los Angeles

Consider the Three Ps of Third-Party Risk:
Policies, Prevention, and Promises

Ready to
Get Started?

The Proven Choice for
Managed Detection and Response

Sales and
Customer Support