Supplier access is the permissions, accounts, or network connections an organization grants to an outside company so it can provide a service or support business operations. It may include access to internal applications, systems, data, or integrations.
Because this access extends an organization’s trust boundary, it should be limited to what the supplier needs, protected with strong authentication, and reviewed regularly. In real attacks, a compromised supplier account or connection can provide a route into a customer’s environment. Defenders reduce that risk by inventorying supplier access, monitoring its use, and promptly changing or revoking it when work ends or circumstances change.