Supply Chain Security

Identifying trustworthy upstream suppliers in a supply chain is an elusive task for an acquirer in nearly any industry. Obtaining assurance that an acquirer’s direct supplier is using a trusted tier II supplier instead of one that is malicious or simply has not been approved through audits is also difficult. This thesis outlines the problem acquirers face when trying to trust their own supply chains as well as proposes a novel approach to address this problem by incorporating the traceability characteristics of the blockchain into an ordinary organization’s supply chain. Additionally, three simulations of this solution are provided to demonstrate simple feasibility. Finally, it is important to note that although the proposed solution directly addresses an acquirer’s desire to gain greater visibility into their own supply chain, it also relies on multiple assumptions that will be clearly laid out.

In recent years, U.S. military and civilian agencies have been rethinking security in the context of globalized production and trade. No longer lodged in a conflict between territorial borders and global flows, national security is increasingly a project of securing supranational systems. The maritime border has been a critical site for experimentation, and a spate of new policy is blurring "inside" and "outside" national space, reconfiguring border security, and reorganizing citizenship and labor rights. These programs seek to govern integrated economic space while they resurrect borders and sanction new forms of containment. Forces that disrupt commodity flows are cast as security threats with labor actions a key target of policy. Direct connections result between market rule created to secure logistic space and the broader project of neoliberalism. Even as neoliberalism is credited with expanding capitalist markets and market logics, it is logistics that have put the cold calculation of cost at the center of the production of space. Since World War II, logistics experts have conceptualized economy anew by spatializing cost-benefit analysis and applying systems analysis to distribution networks. The "revolution in logistics" has changed how space is conceived and represented, and transformed the practical management of supply chains. Historically a military technology of war and colonialism abroad, today logistics lead rather than support the strategies of firms and the security of nations across transnational space. These shifts have implications for the geopolitics of borders and security but also for social and political forms premised on the territory and ontology of national space.

— Logistics industry in Malaysia is rather treated as strategic industry for economic growth and one of the key industries for Third Industrial Master Plan (IMP3) in Malaysia. It is worthwhile to study the environmental sustainable logistics practices of logistics service providers and its effect on their logistics performance, particularly in road freight transportation industry. The study proposed a conceptual framework for sustainable environmental logistics practices on logistics performance, which may be customized for other industries as well.

Presented at The Infrastructure Security Partnership, Critical Infrastructure Symposium, Cheyenne Mountain Resort, April 7-8, 2014. The Conference has posted its proceedings at:

http://www.tisp.org/index.cfm?pid=13346

The PowerPoint presentation that goes along with my paper (see above URL) can bee found at: http://www.tisp.org/tisp/file/HOWARD_Human%20Factor%20in%20Securing%20Critical%20Infrastructure.pdf

Maraknya kegiatan distribusi dan transportasi barang dalam ekonomi global, yang sebagian besarnya didorong oleh outsourcing jasa / layanan, bersifat sangat kompleks. Bahan baku maupun produk jadi yang di distribusikan berasal dari berbagai sumber, baik itu bersumber dari dalam negeri maupun dari luar negeri. Penanganan barang tersebut tentunya membutuhkan sistem rantai pasok (supply chain system) yang bersifat global, hal ini kemudian akan berdampak pada meningkatnya nilai suatu barang yang dikirim. Produk yang bernilai tinggi seperti barang-barang elektronik senilai puluhan ribu dolar (ratusan juta rupiah) biasanya hanya akan diasuransikan sebesar atau kurang dari ratusan dolar (puluhan juta) oleh pihak asuransi pembawa barang. Hal ini tentunya dapat menimbulkan kerugian jika produk tersebut mengalami kegagalan pengiriman. Kegagalan pengiriman dapat disebakan oleh ancaman (threats) keamanan. Ancaman dan beberapa kasus yang telah terjadi kemudian memicu pembuatan regulasi dan kerjasama yang lebih komprehensif antar negara. Persyaratan-persyaratan yang ada di C-TPAT (Customs-Trade Partnership Against Terrorism), CSI (Container Security Initiative), TAPA (Transported Asset Protection Association), PIP (Partners in protection) dan FAST (Free and Secure Trade) merupakan beberapa contoh regulasi yang dibuat untuk mengatasi ancaman-ancaman keamanan pada rantai pasok. Setiap upaya pengamanan rantai pasok tentunya memiliki tujuan utama untuk membangun aliran pergerakan barang yang tepat waktu dan efisien seiring dengan pengamanan serta terlindungnya rantai pasok dari eksploitasi serta mengurangi kerentanan terhadap gangguan yang mengancam. Sedangkan bagi personel yang mendapatkan peran dalam meningkatkan keamanan rantai pasok terdapat tiga tujuan yaitu : untuk membangun efisiensi dan mengamankan pergerakan barang, untuk mendorong sistem rantai pasok secara global yang siap dalam menghadapi dan bertahan terhadap ancaman dan bahaya yang semakin berkembang serta dapat pulih secara cepat ketika terjadi gangguan. Dengan tujuan tersebut, diperlukan strategi dan komitmen untuk

Tedarik zinciri güvenliği, eşyaya ilişkin üretim ve tedarik sürecinin başlangıcından nihai kullanıcı ya da tüketiciye sunulmasına kadar tüm süreçlerdeki güvenliğin geliştirilmesine yönelik olarak yapılan tüm işleri kapsamaktadır. 11 Eylül 2001 terörist saldırılarından sonra tedarik zinciri güvenliğinin artırılması ülke güvenliğinin önemli bir unsuru olarak ortaya çıkmıştır. Bu tarihten itibaren gümrük idareleri ile akademik çevrelerde sıkça dile getirilen bir konu olan tedarik zinciri güvenliğine yönelik uluslararası ilgi giderek artmakta ve gümrük idareleri tarafından kullanılması gereken stratejik araçlardan biri olarak öne çıkmaktadır.

he Seamless Integrated Data Pipeline system was proposed to the European Union in order to overcome the information quality shortcomings of the current international supply chain information exchange systems. Next to identification and authorization of stakeholders, secure access control needs to be considered at design time of the new data pipeline system. This challenge is taken up in this paper. First, based on an analysis of the proposed data pipeline concept, access control requirements are being defined. Second, a new multi-level access control model is being designed. The resulting model organizes access control at two levels, namely, at country and at service level, herewith enabling secure information exchange between global stakeholders.

In the case of the European Union there is a special notion of energy security, which comprises a number of elements. Energy security is frequently represented as part of energy policy, but we often deal with an overlap of the ideas of energy security and energy policy.

The starting point for understanding the notion of the energy policy of the European Union is the supply chain security (i.e. the traditional notion of energy security). First and foremost, the problem of energy supply security was associated with the possibility of satisfying the state-generated demand for energy. However, this mindset soon turned out to be too limited. Energy supply security came to be associated with the social and economic level security, which is expressed in the definition of energy supply security included in the Green Paper of 2001 entitled Towards a European Strategy for the Security of Energy Supply. It reads that energy supply security means ensuring, for the well-being of its citizens and for the proper functioning of the economy, the uninterrupted physical availability of energy products on the market at an affordable price for all consumers (private and industrial ones), whilst respecting environmental concerns and looking towards sustainable development. The main elements that make up the definition are: (1) society, (2) economy, (3) uninterrupted availability of products, (4) prices affordable for consumers, (5) environment, and (6) sustainable development. In a nutshell one might say that energy supply security must allow for three contexts – (1) the social one, (2) the economic one, and (3) the environmental one.

Theocracy, an anti-Bush diatribe against the role of fundamentalist Christians as a strong constituency of the Republican Party, and by the way paid some homage to the spurt of works at the time sharing the common opinion that "…, at the very least, world oil supplies will be tightening in the 2010s and 2020s even as commercial demand mushrooms." But Phillips and those whom he cited couldn't have been more wrong.

In order to make the international supply chain system highly efficient in worldwide transportation of goods, its business processes should be supported by high quality information systems that, “24x7”, provide the right data, at the right time, at the right place, to the right person. To do so, the idea of a (virtual) “Seamless Integrated Data Pipeline” has been proposed, a new concept of an effective information exchange system. A key requirement of the Data Pipeline is that the information to be exchanged must be safe and reliable. Starting form the idea that existing systems should be used, this paper proposes three basic protocols that enable the secure exchange of data with respect to three identified security requirements, namely, that of secure identification of supply chain partners, that of harmonization of security levels, and that of harmonization of trust levels.

With the come into force of the ISPS, appears a very important conflict, due that the new “citizens ports” must be incorporated to the Port facility security plan from the starting point of the project, until they are finished and implemented.
To determinate the non-compatibility of these theories (“The theory of the relation between the port and the cities” and the “Security of the ports facilities”) or to find a cohesion point where this two theories can coexist, is a very important task that must be assumed very cautiously.

Study shows that counterfeit semiconductors or Integrated Circuits (ICs) are increasingly penetrating into advanced electronic defense systems. Traditional supply chain management policies have been found unsuccessful in protecting the IC supply chain. Our study demonstrates that the newly started threat mitigation initiative of Defense Advanced Research Projects Agency's (DARPA) Supply Chain Hardware Integrity for Electronics Defense (SHIELD) scheme has not matured yet, and the proposed authentication protocol improvements are still vulnerable to known non-invasive, sidechannel attacks. In present work, a novel authentication protocol based on strong mutual authentication is proposed, which resists the demonstrated attacks on previous schemes. The security and performance comparison with the previous work is provided, to inform the IC community about the seriousness of the weaknesses, in previous works. The comparison results show that our proposed protocol exchanges more information, uses more memory and makes more encryption computations. Thus, although our proposed scheme consumes more energy, it has the security required by SHIELD. The outcome forces IC producers to provide enough memory and processing power in a small die area, if the electronic defense IC supply chain is to have the expected security.

The Seamless Integrated Data Pipeline system was proposed to the European Union in order to overcome the information quality shortcomings of the current international supply chain information exchange systems. Next to identification and authorization of stakeholders, secure access control needs to be considered at design time of the new data pipeline system. This challenge is taken up in this paper. First, based on an analysis of the proposed data pipeline concept, access control requirements are being defined. Second, a new multi-level access control model is being designed. The resulting model organizes access control at two levels, namely, at country and at service level, herewith enabling secure information exchange between global stakeholders.