What is an Origin Scan?
Definition and Purpose
An Origin Scan is a comprehensive review of a company’s entire business ecosystem, including its operating systems, processes, systems of systems, and other relevant systems. It aims to identify key performance indicators (KPIs) and critical vulnerabilities that can compromise the company’s overall health and security. The purpose of an Origin Scan is to provide a comprehensive understanding of the company’s dependencies and interconnected systems, enabling informed decision-making and strategic planning.
Components of an Origin Scan
A successful Origin Scan typically involves the following components:
I. Operating Systems and Platforms
- Review of the company’s operating systems, including:
- Windows
- macOS
- Linux
- Mobile devices (e.g., iOS, Android)
- Assessment of the company’s software applications, including:
- Enterprise resource planning (ERP) systems
- Customer relationship management (CRM) systems
- Supply chain management (SCM) systems
- Identification of any known vulnerabilities or exploitable weaknesses in these systems.
II. Processes and Procedures
- Review of the company’s business processes, including:
- Operational processes (e.g., order fulfillment, payment processing)
- Financial processes (e.g., accounting, invoicing)
- IT services (e.g., support, security)
- Identification of any inefficiencies or inefficiencies in these processes that could impact security or compliance.
III. Systems of Systems
- Review of the company’s Enterprise Resource Planning (ERP) systems, including:
- Financial management systems
- Human capital management systems
- Supply chain management systems
- Assessment of the company’s customer relationship management (CRM) systems, including:
- Sales and marketing automation systems
- Customer service and support systems
- Identification of any known vulnerabilities or exploitable weaknesses in these systems.
IV. Data Networks and Infrastructure
- Review of the company’s data centers and network infrastructure, including:
- Internet protocol (IP) addresses
- Domain names and IP addresses
- Network segmentation and access control
- Identification of any known vulnerabilities or exploitable weaknesses in these systems.
V. Cloud and Migration
- Review of the company’s cloud services, including:
- Private cloud (in-house) services
- Public cloud (third-party) services
- Hybrid cloud services
- Assessment of the company’s migration strategies and cloud readiness.
VI. Third-Party Interactions
- Review of the company’s third-party vendors and partners, including:
- Supply chain partners
- Technology vendors
- Financial institutions
- Identification of any known vulnerabilities or exploitable weaknesses in these interactions.
VII. Compliance and Regulatory
- Review of the company’s compliance requirements**, including:
- Industry-specific regulations (e.g., HIPAA, PCI-DSS)
- General data protection regulation (GDPR)
- Other regulatory requirements
- Identification of any known vulnerabilities or exploitable weaknesses in these compliance requirements.
Conclusion
An Origin Scan is a critical step in identifying and addressing potential risks and vulnerabilities in a company’s business ecosystem. By understanding the interconnected systems and dependencies that make up the company’s operations, customers, and stakeholders, organizations can take proactive steps to mitigate risks and ensure the integrity of their data and assets.