Skip to main content

Supply Chain Security

 

Supply chain security is the part of supply chain management that focuses on the risk management of external suppliers, vendors, logistics and transportation. Its goal is to identify, analyze and mitigate the risks inherent in working with other organizations as part of a supply chain. Supply chain security involves both physical security relating to products and cybersecurity for software and services.

Because supply chains can vary greatly from group to group, and many different organizations may be involved, there is no single set of established supply chain security guidelines or best practices. A complete supply chain security strategy requires following risk management principles and cyberdefense in depth.

Physical supply chain security and integrity

In the past, supply chain security primarily focused on physical security and integrity. Physical threats encompass risks with internal and external sources, such as theft, sabotage and terrorism.

Organizations often mitigate physical attacks by tracking shipments and checking regulatory paperwork.  Additionally, vendors could be required to secure shipments following specific quality guidelines, and a business could employ several vendors to ensure a steady supply of commodity products.

External auditors or inspectors could go to a factory, and businesses could run background checks on personnel as well. Shipments could also be logged, guarded and checked prior to and after shipping to stop tampering or theft.

Cyberthreats and supply chain security

More recently, cyberthreats have risen to the forefront of supply chain security concerns. Cyberthreats refer to vulnerabilities in IT and software systems, like malware attacks, piracy, unauthorized ERP access and unintentional or maliciously injected backdoors in the purchased, open source or proprietary software used by organizations.

Supply chain security here primarily involves minimizing risks from using software developed by another organization, and securing organizational data accessed by another organization in your supply chain. Organizations cannot take for granted that the software that they use or purchase is secure.

Because close collaboration is often required between businesses, suppliers and resellers, computer networks may become intertwined or sensitive data shared. This can result in a breach of one organization affecting many. Instead of attacking the target directly, a cybercriminal may attack a weaker organization in the target's supply chain and use that access to meet their goals.

Many are responding to recent supply chain attacks such as the SolarWinds attacks by, for example, reducing reliance on foreign suppliers and building primarily domestic supply chains. Some companies are moving production out of foreign factories to domestic ones as well.

Supply chain security best practices

Supply chain security touches on many areas, and will vary greatly from organization to organization. Risk management principles can guide the strategy to identify threats or potential issues and implement appropriate mitigations. No single set of best practices can cover every situation.

An in-depth defense strategy can greatly improve overall supply chain security. Best practices for supply chain security include:

  • Log and track shipments. Use automated notifications for the sender and receiver.
  • Use locks and tamper-evident seals during shipping.
  • Inspect factories and warehouses.
  • Require background checks on employees.
  • Use accredited or certified suppliers.
  • Perform security strategy assessments with local laws and governance policies in mind.
  • Perform penetration and vulnerability testing on partners with which you share data.
  • Authenticate all data transmission and identify requestors.
  • Use permissions or role-based access to data.
  • Require minimum cybersecurity or specific best practice baselines of vendors and resellers.
  • Use licensed third-party auditors to certify potential partners.
  • Train employees to be alert to changes and inconsistencies.
  • Regularly audit open source and vendor source code.
  • Restrict third-party programs' access and permissions.
  • Use network level scanning, behavioral analysis and intrusion detection to identify potential breaches.
  • Have a response plan in place for quickly acting on discovered threats.
  • Consult governmental guidelines and regulations appropriate for your region.

By applying the mitigations best suited to its business sector, an organization can greatly improve its supply chain security posture.

Importance of supply chain security

Supply chain security should be a high priority for organizations, as a breach within the system could damage or disrupt operations. Vulnerabilities within a supply chain could lead to unnecessary costs, inefficient delivery schedules and a loss of intellectual property. Additionally, delivering products that have been tampered with or are unauthorized could be harmful to customers and lead to unwanted lawsuits.

Security management systems can help protect supply chains from physical and cyber threats. While threats cannot be completely erased, supply chain security can work towards a more secure, efficient movement of goods that can recover rapidly from disruptions.

Comments

Post a Comment

Popular posts from this blog

Black swan

A  black swan event  is an incident that occurs randomly and unexpectedly and has wide-spread ramifications. The event is usually followed with reflection and a flawed rationalization that it was inevitable. The phrase illustrates the frailty of inductive reasoning and the danger of making sweeping generalizations from limited observations. The term came from the idea that if a man saw a thousand swans and they were all white, he might logically conclude that all swans are white. The flaw in his logic is that even when the premises are true, the conclusion can still be false. In other words, just because the man has never seen a black swan, it does not mean they do not exist. As Dutch explorers discovered in 1697, black swans are simply outliers -- rare birds, unknown to Europeans until Willem de Vlamingh and his crew visited Australia. Statistician Nassim Nicholas Taleb uses the phrase black swan as a metaphor for how humans deal with unpredictable events in his 2007...
Post a Comment
Read more

A Graphics Processing Unit (GPU)

A graphics processing unit (GPU) is a computer chip that performs rapid mathematical calculations, primarily for the purpose of rendering images. A GPU may be found integrated with a central processing unit (CPU) on the same circuit, on a graphics card or in the motherboard of a personal computer or server. In the early days of computing, the CPU performed these calculations. As more graphics-intensive applications such as AutoCAD were developed; however, their demands put strain on the CPU and degraded performance. GPUs came about as a way to offload those tasks from CPUs, freeing up their processing power. NVIDIA, AMD, Intel and ARM are some of the major players in the GPU market. GPU vs. CPU A graphics processing unit is able to render images more quickly than a central processing unit because of its parallel processing architecture, which allows it to perform multiple calculations at the same time. A single CPU does not have this capability, although multi...
Post a Comment
Read more

6G (sixth-generation wireless)

6G (sixth-generation wireless) is the successor to 5G cellular technology. 6G networks will be able to use higher frequencies than 5G networks and provide substantially higher capacity and much lower latency. One of the goals of the 6G Internet will be to support one micro-second latency communications, representing 1,000 times faster -- or 1/1000th the latency -- than one millisecond throughput. The 6G technology market is expected to facilitate large improvements in the areas of imaging, presence technology and location awareness. Working in conjunction with AI, the computational infrastructure of 6G will be able to autonomously determine the best location for computing to occur; this includes decisions about data storage, processing and sharing.  Advantages of 6G over 5G 6G is expected to support 1 terabyte per second (Tbps) speeds. This level of capacity and latency will be unprecedented and wi...
Post a Comment
Read more