SUPAN-D Framework

Cyber Threat Surface Analysis: SUPAN - D Framework 

It is common to perform Cyber Threat analysis using a single Attack Surface that maps all threat vectors that an organization faces. However, this can become quite complex and also difficult to keep track of as organizations evolve and new threat vectors come into play. 

At Yantrie, we propose to break the Attack Surface into six distinct dimensions along the SUPAN-D framework. Arranging these six dimensions as the six surfaces of a cube, allows organizational leaders to create a visual map of their overall threat surface in an easy-to-use and simple model. Effectively addressing the threat vectors against each of these six intersecting dimensions will ensure that organizations are able to manage their cyber threats and protect their assets appropriately inside the cube. Breaking down the threat surface into the six dimensions represented by SUPAN-D also allows clearly defined ownership within an organization such that cybersecurity truly becomes a collective endeavor rather than a standalone security team that must work with business owners to gain their confidence and support.