RoomIQ
Conference-room scope. The room is where the supply-chain implant case played out.
See RoomIQ →
Use Case · Vendor Risk & Supply-Chain Integrity
Vendor risk you can attest to.
The hardest part of vendor risk is the part nobody on the inside owns. Vendor-managed codecs, signage players, smart cameras, and accessory hardware arrive on the network with their own firmware, their own lifecycle, and their own update cadence. CybrIQ identifies them at the wire, dates each one, and catches the supply-chain anomaly the paper trail will never show.
For: CISO, vendor risk management, procurement, supply-chain security.
The Visibility Gap
Where the vendor-risk gap shows up.
Devices that pass paper and fail the wire.
Procurement records complete. Serial numbers match. Software validation clears. The Layer 1 fingerprint shows a device that was modified upstream of the install. CybrIQ flags the difference in seconds.
Vendor-managed firmware on the same VLAN as patient data.
Healthcare imaging modalities, smart displays, and IoT monitors run vendor-managed firmware that the customer's IT team did not configure. Each one a network endpoint with a posture nobody on the inside owns.
Replacement parts under RMA that never get logged.
A vendor ships a swapped codec, signage player, or camera. The replacement lands on the network. The asset register does not know. The auditor will.
NDAA 889 prohibited components in plain sight.
Devices labeled as one vendor that contain prohibited components from another. CybrIQ identifies the underlying component by Device DNA™ regardless of how the device is labeled.
Outcomes
What changes when CybrIQ runs against this use case.
Reference engagement
312 / 47
Devices found in a Fortune 500 healthcare campus's first sweep, and devices missing from the asset register entirely. Several of the 47 were vendor-managed.
Implants caught
1 in fleet
Real customer environment: a global enterprise rolled out hundreds of identical conference kits. CybrIQ flagged one camera whose electrical fingerprint did not match the rest. Supply-chain implant.
Vendor coverage
All
Every vendor-managed device on the wire is fingerprinted and dated. Crestron, Poly by HP, Logitech, Cisco, Hikvision, and the long tail.
What Lands This Use Case
The CybrIQ products and services that ship the outcome.
SpacesIQ
Building scope. Catches vendor-managed devices across signage, kiosks, sensors, and the long tail.
See SpacesIQ →ComplianceIQ
When vendor risk is part of an active framework (NIST 800-171, CMMC, NDAA 889), ComplianceIQ wires the evidence into the audit.
See ComplianceIQ →Find the supply-chain anomaly the paper trail will never show.
30 minutes. One environment. The artifact at the end is yours either way.