What is supply chain blast-radius mapping?

Supply chain blast-radius mapping identifies which systems, services, business processes and downstream dependencies could be affected when a supplier, technology or shared provider is compromised or unavailable. It connects an incident to the organisation’s actual digital relationships, allowing responders to move beyond a vendor name and determine where exposure exists. A useful map includes direct and indirect suppliers, connected assets, critical services, shared infrastructure and the evidence supporting each relationship. ThingsRecon combines external supplier discovery with Digital Proximity to show which dependencies sit closest to critical systems, helping teams answer “Are we affected?” and prioritise containment, communication and recovery. In practice, teams should record the supporting evidence, confirm ownership and business criticality, and connect the finding to an accountable workflow. This prevents a useful observation from becoming another isolated score or dashboard alert.