Technology Asset Protection Association (TAPA) “Securing the ...

TechnologyAsset ProtectionAssociation(TAPA)“Securing the Global SupplyChain”Rosita Swain

AgendaWhat is TAPATAPA Evolution2004 Strategic ObjectivesTAPA Uniformed ApproachTAPA Uniformed ProcessContinuous Improvement

What is TAPA?TechnologyAssetProtectionAssociationis an forum of security, insurance andlogistics professionals representing hightechnology companies who have organizedfor the purpose of addressing the emergingcargo security threats that are common to thetechnology industry.

What TAPA is NOTForum for “blacklisting” of suppliers– Information sharing is done on standards andBKM’s, not on any supplier performance issuesForum for comparison of industry/supplier losses– All discussion under NDA----$ $ = “don’t ask / don’ttell”Guarantor of business– Supplier compliance to standards gaugedindependently– Certified suppliers to be listed on limited accesswebsite----non-certified locations not listedUnreasonable or cost-prohibitive

Evolution of TAPA1997: Security Professionals meet for firsttime to address problems they face in regardsto high tech components theft:– No one is exempt from cargo theft– Demand for product peaking– Highly liquid components and demand on gray andblack markets– Conclusion: Establish a Forum dedicated todevelopment of best known protective measures,benchmarking and global implementation

1998-2000:Evolution Continued– Development of Standards:Audit CriteriaContractual Security T&C’s in form of FreightSecurity RequirementsScoring Matrix– 1999 TAPA EMEA formed– 2000 TAPA Asia formed– TAPA Worldwide Council developed

Charter of TAPA AsiaEstablish best known security practices infreight transportation and influence theiradoption by regulatory bodiesPromote compliance with identified bestpracticesIdentify latest technology in protection ofassetsShare information among members

2004 Strategic Objectives1. Continuous Improvement of FSR, ScoringMatrix, Audit ProtocolAnnual publication of FSRDue 1 January Every YearDevelop Worldwide Change Control Board protocol2. Develop Complete Supply Chain CertificationProgramTrucking OperationsIntegrator RequirementsAirline/Airport/Government Cargo Handling Facility Requirements3PL Complete Q1, 20033. Broaden TAPA ScopeShift from high tech to high exposurePharmaceutical membership

TAPA Uniformed Approach

Putting the Right SecurityMeasures in PlaceClassification of facilities in 3 categories----A, B, C--Cdepending on level of threat– As calculated by environmental and historical data andrisk aversion level for individual company– Highest level classification requires highest level ofsecurityApplied to trucking operationsAssessment protocol using 0 - 2 qualitative score----noweighting

3PHILOSOPHY• VALUE• VOLUME• VULNERABILITY

FREIGHT SECURITYFREIGHT SECURITYStandard Assessment ProtocolTrainingContractual LanguageConsequencesInvestigationsFreight Security Requirements

FREIGHT SECURITYELEMENTSDocumentationFreight Security Requirements– Specific required securityelements, with functionaldescriptionsContractual Language– FSR as addendum toLogistics contractsStandard Assessment Protocol– Standardized audits– Standardized scoring matrix– Standardized reportsProcessesConsequences– Corrective actions– Termination of contractTraining– Internal and Supplier– Requirements and auditingInvestigations– Roles and responsibilitiesafter loss– Recovery of property andapprehension of thieves

TAPA Uniformed Process

ACERENTEXMICRONPACKARD BELLAMDHITACHIMATSUSHITAMERISELPHILIPSAMDAHLINGRAMNORREDQUANTUMIndependentAMGENASPEN SYS.AMSGATEWAYIBMSAMSUNGSEAGATESED INT.Auditors:AVNETBAY NETWKSBERNES GPFREIGHTCARRIER /FORWARDERSILICON GR.SOLECTRONSMITH ASSOC.CELESTICASONYCISCOSUN MICRO.Move FromCOMARKCOMPAQH. PACKARDMICROAGETECH DATATEXAS INST.This…CYRIX/NSMDELLDIGITALFAIRCHILDINACOMINTELMAXTORLEXMARKMOTOROLAPNYTOSHIBA3COMWESTERN DIG.…To ThisTAPAAUTHORIZEDAUDITORFREIGHTCARRIER /FORWARDER

AuditFirms

Audit Criteria1. Perimeter Security Preventative Measures ScoreWarehouseClassificationX if notScored1.2 CCTV Systems 1.2.1 - CCTV external coverage of shipping andreceiving yard to cover movement of vehicles and 0 A 0people1.2.2 - 100% CCTV external coverage of all dockdoors0 A 01.2.3 - CCTV system able to view all sides of thefacility0 A 01.3 Lighting 1.3.1 -Flood lighting of enclosed loading/unloadingareas0 A 01.3.2 - Dock doors illuminated externally at night 0 A 01.3.3. - External and internal lighting levels thatsupport high quality CCTV images and recording0 A 01.4 Perimeter alarm 1.4.1 - All facility external doors alarmed & linked todetectionmain alarm system0 A 01.5 Perimeterwindows, doors &other openings1.5.1 - Any windows or other openings in warehousewalls must secured by steel bars/mesh and alarmed(or other material that would harden the opening toburglary)1.5.2 - Ground floor warehouse windows protected byanti-ram posts or other physical barrier1.5.3 - Dock doors of sufficient strength or design toprevent or delay forced entry by use of portable handtools or ramming by vehicle, interior hinge pins andsealed hardware1.5.4 - Reinforced exit doors from warehouse (steeldoors & frames or suitable alternative1.5.5 - Exterior walls to be designed to resistpenetration by removing building fabric, cutting orramming by vehicle2. Access Control -Preventative MeasuresOffice Areas2.1 Office Entrances 2.1.1 - Guard or Receptionist on main office entrypoints2.1.2 - Security controlled access points (i.e. Cardaccess & CCTV)TotalScore0 A 00 A 00 A 00 A 00 A 0ScoreSection Total: 0Total Possible: 24Warehouse X if not TotalClassification Scored Score0 A 0 00 A 0 0

Continuous Improvement

CustomsTradePartnershipAgainstTerrorism (errorism (C C TPAT)Supply Chain Security requirements: Factory,Warehouse, Docks, Forwarder/Integrator FacilitiesShared FSR’s, Audit Protocol, and Scoring Matrixwith program management, best known methodsto dateAlignment agreement that TAPA securityrequirements fulfill supplier and manufacturerobligation if certified

The Infrastructure SecurityPartnership:– Cargo Security– Risk/Threat Assessments inSupply ChainTransportation SecurityAdministration:TAPA Partners– Partnership on developmentof FTL / LTL trailer loadsecurity requirements– TAPA Standards template forin transit cargo protectionNational Cargo SecurityCouncil

OpportunitiesPartner with Insurance industries, worldwidealliance with TAPA and insurancecommunity….Americas model– Invite to London Market to TAPA EMEA andAsia members to TAPA AsiaProliferation of TAPA, coverage mandatesPremium / Coverage Recognition:– Suppliers that have facilities certified– Manufacturers that have written in TAPA intoLogistics contracts

TAPA Asia Websitewww.TAPA-asia.org