{"product_id":"supply-chain-hardening-bundle","title":"Quarterly Supply Chain Hardening","description":"\u003cp\u003e\u003cem\u003eEvery 90 days, with a trend line on every check.\u003c\/em\u003e\u003c\/p\u003e\n\u003ch3\u003eWhat it is\u003c\/h3\u003e\n\u003cp\u003eRuns twenty-three checks on this computer, the network it is on, the warehouse devices it can hear and the domains you declare, asks your operation's questions once, and maps everything to NIST CSF 2.0 in one report. Nothing is changed.\u003c\/p\u003e\n\u003cp\u003eA load is paid to a carrier who never existed, a warehouse system is locked the week before peak, and your shippers' questionnaires ask what you have in place. This bundle gathers what one site can show: its computers, the devices sharing its network, your domain and the look-alike domains used for carrier impersonation, your portal endpoint, your asset register, and your own answers.\u003c\/p\u003e\n\u003cp\u003eThis is the quarterly form of the Supply Chain Hardening Bundle (IND-LOGISTICS-84): the same 23 checks, run four times a year, each report showing what changed since the last.\u003c\/p\u003e\n\u003ch3\u003eThe framework\u003c\/h3\u003e\n\u003cp\u003eMapped to NIST CSF 2.0 — with CISA's Cybersecurity Performance Goals 2.0. The report maps what the scan observed on this computer, this network and the domains you declare to that framework's expectations and shows where each finding sits. It is a map of findings to the framework, not a ruling on whether you meet it, and it is not a risk analysis; your industry's expectations stand beside the findings, never in place of them.\u003c\/p\u003e\n\u003ch3\u003eWho it is for\u003c\/h3\u003e\n\u003cp\u003eA freight broker, third-party logistics provider, warehouse, small carrier or customs broker with its own computers and domain. A large 3PL, carrier network or port operator is measured across every site and system and is the human-delivered engagement's customer; this bundle is one site's first look.\u003c\/p\u003e\n\u003cp\u003eA large 3PL, carrier network or port operator is measured across every site, every integrated system and every partner connection. That is the work of the human-delivered ThreatVector engagement. This report is still correct about the computer and the network it ran on and is a useful first look for the operations lead who ran it.\u003c\/p\u003e\n\u003ch3\u003eWhat runs (23 checks)\u003c\/h3\u003e\n\u003cul\u003e\n\u003cli\u003eWindows Security Health Check (ENDPOINT-01)\u003c\/li\u003e\n\u003cli\u003eRansomware Readiness Check (RANSOM-READY-03)\u003c\/li\u003e\n\u003cli\u003eAccount \u0026amp; Access Review (INSIDER-ACCESS-05)\u003c\/li\u003e\n\u003cli\u003eCredential Hygiene Check (PW-HYGIENE-11)\u003c\/li\u003e\n\u003cli\u003eOut-of-Date Software Scan (EOL-16)\u003c\/li\u003e\n\u003cli\u003eStartup \u0026amp; Persistence Check (PERSIST-24)\u003c\/li\u003e\n\u003cli\u003eWi-Fi \u0026amp; Home Network Check (WIFI-LAN-02)\u003c\/li\u003e\n\u003cli\u003eRouter \u0026amp; Wi-Fi Settings Checklist (ROUTER-22)\u003c\/li\u003e\n\u003cli\u003eEmail Spoofing \u0026amp; BEC Check (BEC-08)\u003c\/li\u003e\n\u003cli\u003eBreach \u0026amp; Identity Exposure Check (BREACH-10)\u003c\/li\u003e\n\u003cli\u003eInsider Risk Self-Assessment (INSIDER-21)\u003c\/li\u003e\n\u003cli\u003eIndustry Readiness Questionnaire (READINESS-91)\u003c\/li\u003e\n\u003cli\u003eInternet Exposure Scan (EXPOSURE-06)\u003c\/li\u003e\n\u003cli\u003eWebsite \u0026amp; Storefront Checkup (STOREFRONT-07)\u003c\/li\u003e\n\u003cli\u003eCertificate \u0026amp; Encryption Check (TLS-09)\u003c\/li\u003e\n\u003cli\u003eDomain \u0026amp; DNS Security Check (DNS-63)\u003c\/li\u003e\n\u003cli\u003eMedical \u0026amp; Operational Device Scan (DEVICES-77)\u003c\/li\u003e\n\u003cli\u003eBusiness Impersonation \u0026amp; Typosquat Sweep (IMPERSON-19)\u003c\/li\u003e\n\u003cli\u003eCloud Storage Exposure Check (BUCKET-28)\u003c\/li\u003e\n\u003cli\u003eAI Usage \u0026amp; Shadow-AI Exposure Review (AIUSE-70)\u003c\/li\u003e\n\u003cli\u003eDigital Asset Register \u0026amp; Ownership Check (REGISTER-74)\u003c\/li\u003e\n\u003cli\u003eHardware, Firmware \u0026amp; Removable-Media Check (ASSET-73)\u003c\/li\u003e\n\u003cli\u003eAPI \u0026amp; Web-Endpoint Security Scan (API-60) — runs only when you give the address of a web API you run, if any (optional)\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003ch3\u003ePrice\u003c\/h3\u003e\n\u003cp\u003e\u003cstrong\u003e$649 a year\u003c\/strong\u003e, four runs, one every 90 days, with a trend line on every check from the second run. One run on its own is \u003cstrong\u003e$499\u003c\/strong\u003e: the Supply Chain Hardening Bundle (IND-LOGISTICS-84).\u003c\/p\u003e\n\u003ch3\u003eWhat it never does\u003c\/h3\u003e\n\u003cp\u003eIt never changes a setting, installs anything, tries a password or signs in to an account. Where a check reads inside files it reports counts only — never a value, a file name or a path. Nothing is exploited and no credential is guessed. Your own answers are recorded as yours and never upgraded into something the scan observed.\u003c\/p\u003e","brand":"ThreatVector","offers":[{"title":"Default Title","offer_id":53138389303608,"sku":"IND-LOGISTICS-Q-84","price":649.0,"currency_code":"USD","in_stock":false}],"url":"https:\/\/cybermafia.store\/products\/supply-chain-hardening-bundle","provider":"ThreatVector","version":"1.0","type":"link"}