Trusted Relationship

Adversaries may gain access to an intended victim by breaching or leveraging an existing relationship with a third party that already has access, such as an IT contractor, managed service provider, or cloud partner. The access path may use the provider's existing account, connection, or delegated role and may receive less scrutiny than access from an untrusted party; the effective reach depends on the relationship's assigned scope.