When it comes to securing the supply chain, businesses should not only protect themselves but also their suppliers, customers and the general public. Failure to do so could result in potentially ruinous consequences, Logistics Managementsays, such as:
- Widespread disruption to delivery capabilities, which can lead to loss of revenue and service failure in the eyes of customers;
- Reduced brand equity — especially if customers see the security breakdown as a result of neglect;
- Investor discontent due to revenue loss;
- Increase in regulatory scrutiny;
- Legal liability; and
- Loss of supply chain partners.
Suffice it to say that no business would want to suffer the above — especially given the currently volatile economy. A recent study by Aberdeen Group shows that few companies can afford to ignore supply chain risks. Almost 99 percent of the 138 companies surveyed suffered a supply chain disruption and 58 percent suffered a financial loss, Modern Materials Handling reports.
To help companies tackle the challenges for securing the supply chain, Logistics Management identified several competencies from which to create a security framework. They are:
Process Strategy
To implement a security strategy, everyone must be on board and employees must know their managers are committed to the same goal. According to Aberdeen, more than a third of the companies interviewed had an enterprise risk department, but only 3 percent said that department was actually implementing and managing supply chain risk management initiatives.
It's no help to have a chief security officer if that person doesn't actually do anything. "Top management must be visible in their commitment and dedication to implementing security initiatives," Logistics Management says.
Process Management and Process Technology
Process management is making sure that all the raw materials coming in and all the finished goods coming out of your plant are secure. It also involves ensuring that the manufacturing process is safe.
For example, a U.S. Chemical Safety Board study in November 2006 found that 281 industrial dust-related fires and explosions killed 119 people and caused more than 718 injuries in the U.S. between 1980 to 2005, the Wall Street Journalreports. "In many accidents, employers and employees were unaware that a hazard even existed," the U.S. Occupational Safety and Health Administration (OSHA) notes.
Something as seemingly unimportant as dust could cause a business to lose thousands of dollars because no one made sure the dust levels were safe for the processes in the plant.
Process technology, which is directly tied to process management, involves the means by which companies track the products coming in and out. With counterfeiting now 5 percent to 7 percent of the world trade, according to IndustryWeek, manufacturers need to keep a close eye on the raw materials coming in and make sure it is their products — not counterfeited ones — that reach the store shelves.
The U.S. economy loses as much as $250 billion annually to counterfeiting, IndustryWeek reports. It suggests partnering with governmental and non-governmental agencies to protect supplies and goods.
Individual product protection can be done by using holographic labels and other authentication devices throughout the distribution supply chain. U.S. congress is currently considering making the use of security markings on some pharmaceutical products mandatory after Malaysia's success with a similar program, Packaging Digest reports.
Since the program was introduced, there was a significant increase in the identification and confiscation of illegal items entering the distribution chain.
Infrastructure Management and Communication Management
Infrastructure management is basically protecting the physical facility. Ready Business provides a guideline on how to keep your building safe, recommending manufacturers:
- Make building site maps available and mark emergency routes;
- Consider installing closed circuit TV, access control, security guards or other security systems;
- Secure all the ways people enter and leave the building and what they have access to;
- Identify essential equipment to keep the business open; and
- Comply with all local, state and federal codes and other safety regulations.
The second part of this is making sure your employees know where to turn when they have security issues or if they witnessed a security breach. "Not collaborating within the company can also put companies at extra risk," Aberdeen says. "When decision makers are not alerted on time to possible risks, a more damaging disruption is likely."
Management Technology
Management technology is using technology to detect and share potential threats and security information internally and externally. "These information systems are also critical in obtaining and sharing information with suppliers, customers, vendors and government agencies," Logistics Management says.
Information technology/systems are usually the first to detect breaches or product contamination. Businesses can choose to have multiple systems for inspecting and checking the manufacturing process or have a single network defense that combines hardware, software and networking technologies, CIO.com says.
U.S. companies spent $3.85 billion on network security appliances in 2006 with expenditure expected to double by 2011, market researcher IDC says (via CIO.com).
Metrics
To ensure the security strategy is working, every business must measure its success constantly. The Center for Internet Security (CIS) has developed benchmarks to identify and define key information security metrics, as noted by Information Security.
CIS expects to expand the benchmarks list to 20 items in the next year, but for now considers these key areas a high priority:
- Average time between security incidents;
- Mean recovery time;
- Percent of systems configured to standard;
- Percent of systems with antivirus; and
- Percent of applications that had risk and vulnerability assessment.
Relationship Management
Most businesses cannot function without their supply chain partners, which is why it is critical that all partners involved are on the same page when it comes to security. "Collaboration with external entities (customers/suppliers and service providers) is necessary to ensure that security procedures are communicated and followed," Logistics Management stresses.
Those with global partners need to be even better at managing these relationships as they are "often unable to monitor these partners and protect against theft, contamination or insertion of counterfeit cargo," Logistics Management adds.
Public Interface Management
Public interface management is forging relationships with the government and the public about security. "Working together, government and industry can better understand and address the nation's most pressing security needs and create meaningful initiatives to address those needs," Homeland Security Today says.
Logistics Management suggests actively participating in the development of government standards or security initiatives as one way of fostering these relationships.
Resources
Supply Chain Security: A Framework for Protecting Your Supply Chain
by David Closs, Cheri Speier, Judith Whipple and M. Douglass Voss
Logistics Management, Sept. 1, 2008
Supply Chain Disruptions Plague Most Companies
by Allison Manning
Modern Materials Handling, Aug. 27, 2008
Stop Counterfeiters from Jeopardizing Your Brand and Bottom Line
by Brian W. Lewis, Parter, Nicole Nocera, Partner and E. Tim Walker
IndustryWeek, Sept. 19, 2008
Dust Cloud Settles Over Industries
by Paulo Prada, Betsy McKay and Stephanie Chen
The Wall Street Journal, May 2, 2008
How Holograms Can Stop Counterfeiting
Packaging Digest, Aug. 1, 2008
Secure Facilities, Buildings & Plants
Ready Business
Unified Threat Management, Demystified
by Bill Snyder
CIO.com, March 24, 2008
CIS Takes the Measure of Information Security
by Neil Roiter
Information Security, Sept. 9, 2008
A Culture of Security: Making It Automatic
by Steve King
Homeland Security Today, Sept. 1, 2008
