Connect with us

Non classé

The Critical Role of Provenance in Cybersecurity and Supply Chains

Published

on

The Critical Role Of Provenance In Cybersecurity And Supply Chains

The Power Inverter Kill Switch Story Underlines The Importance Of Provenance in Cybersecurity and the Supply Chain

Do you really know what your production assets contain?

If you’ve ever bought antiques, you’re probably familiar with the concept of provenance. I have relatives that own a dresser that was gifted from George Washington to a family friend when he was a lieutenant in the colonial army. How do we know this? Because of the authenticated documentation that came with the dresser proving its origin. This is provenance – proving and documenting where something came from, what it contains, and the path it took before it wound up in your possession.

Heavy assets in industrial automation are a lot more complex than antiques, and the stakes are a lot higher, as we saw recently with the story about cellular powered kill switches found in Chinese manufactured power inverters used in solar and wind farms. In addition to being used around the world for renewable power applications, these inverters are also used in batteries, heat pumps, EV chargers, and other assets.

It’s typical for these products to have remote access capabilities, but these connections are normally handled through firewalls. You may have read the story about Chinese manufactured cranes that have remote connectivity capabilities but are largely unsecured. Many end users were not even aware of these remote communication capabilities, or if they were, they were improperly secured. If your assets come with features and functions that present a potential cybersecurity risk to your enterprise and you don’t address it or are not aware of it even though it is documented, that’s ultimately your responsibility, not the vendor’s.

The Problem of Rogue Components

It’s not always obvious what all the components are in an asset, be they hardware or software. The more complex the asset, the more complicated the issue becomes. In the case of the power inverters, the communication devices were undocumented, and asset owners did not even know they were there. The devices were found by a US-based team of experts whose job was to strip these assets down and identify their components. According to the Reuters article referenced in the above link, the “rogue components provide additional, undocumented communication channels that could allow firewalls to be circumvented remotely, with potentially catastrophic consequences.”

What is Provenance in Cybersecurity?

In the world of cybersecurity, provenance is more than just the source of origin. According to NIST, provenance is “The chronology of the origin, development, ownership, location, and changes to a system or system component and associated data. It may also include personnel and processes used to interact with or make modifications to the system, component, or associated data.” So, it’s more than just where the product came from, it includes all the associated data about what the asset or “component” contains from both a hardware and software standpoint.

Large Power Transformers In a Storage Yard: Source: IEEE SpectrumSBOMs: What’s in Your Software?

The concept of software bills of materials (SBOM) has emerged as an important element of cybersecurity. In simple terms it contains the details and supply chain relationships of various components used in building software. Those who produce, purchase, and operate software use it to improve their understanding of what components are in the systems. This in turn has multiple benefits, most notably the potential to track known and newly emerged vulnerabilities and risks. This concept applies to all systems, including those used for manufacturing operations and control.

SBOMs are becoming increasingly mandated in new regulations across a wide range of industries. Thee White House’s 2021 Executive Order on Improving the Nation’s Cybersecurity mandated that federal agencies receive SBOMs for software they purchase. The EU’s Cyber Resilience Act (CRA) requires manufacturers of digital products sold in the EU to produce a top-level SBOM.

HBOMs: What’s in Your Hardware?

Unfortunately, SBOMs don’t do much to identify the various hardware components in an asset or system and where they come from. For that, you need an HBOM or hardware bill of materials, which should provide a detailed inventory of the hardware components included in an asset or system. CISA has its own Hardware Bill of Materials Framework for Supply Chain risk Management that you can review here and download.

HBOMs are relevant to any hardware asset, from a DCS controller or a field device like a pressure transmitter all the way up to large transformers. The larger and more complex the asset is, the more important it is to have a complete HBOM and SBOM. Take the example of large power transformers (LPTs), which again are largely sourced from China, are often custom built, and contain many hardware and software components. Many times, we don’t even know what’s in these large assets until we completely tear them down. A Chinese power transformer was sent to Sandia National Laboratory (SNL) for inspection in 2020, but even those results are classified.

End Users Need to Take Supply Chain Cybersecurity Seriously

SBOMs and HBOMs are all part of the larger issue of supply chain cybersecurity. Compiling an accurate inventory of installed systems has long been considered as one of the first steps in a cybersecurity program. Simply identifying such assets is no longer sufficient. Potential supply chain related risks can only be addressed if the provenance of all components in those assets is known. When assessing or procuring software systems or hardware it is very important to ask the supplier to list the components in the product. This may take the form of a software or hardware bill of material, but such a formal presentation may not be necessary. If the supplier is unwilling or unable to provide this information, then this should be considered when making buying choices.

Other aspects of supply chain cybersecurity include evaluating the cybersecurity posture of your software and service partners. The importance of this was shown in the SolarWinds attack. End users are increasingly reliant on their technology and service partners to keep things running, but if your partners have poor cyber resilience, it can and will directly affect your operations at some point.

The US National Institute of Standards and Technology (NIST) provides guidance for supply chain cybersecurity in the form of a special publication titled “Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations.” This document describes how to identify, assess, and respond to cybersecurity risks throughout the supply chain at all levels of an organization. It offers key practices for organizations to adopt as they develop their capability to manage cybersecurity risks within and across their supply chains.

The post The Critical Role of Provenance in Cybersecurity and Supply Chains appeared first on Logistics Viewpoints.

Continue Reading

Non classé

Federal Industrial Partnerships and Supply Chain Realignment Under the Trump Administration: Pharmaceuticals, Semiconductors, Critical Minerals, and Energy

Published

on

By

Federal Industrial Partnerships And Supply Chain Realignment Under The Trump Administration: Pharmaceuticals, Semiconductors, Critical Minerals, And Energy

In the months leading up to the 2026 midterm elections, the Trump administration has launched a broad initiative to negotiate agreements with companies across as many as thirty industries. According to reporting from Reuters and other outlets, these deals involve a range of mechanisms, including tariff relief, equity stakes, revenue guarantees, and regulatory adjustments.

The purpose of the initiative, according to administration officials, is to strengthen U.S. national and economic security by encouraging companies to expand production domestically, reduce reliance on China, and ensure the availability of critical products.

For logistics and supply chain leaders, this represents a significant change in the relationship between government and industry. Federal agencies are no longer simply regulators or supporters of infrastructure. They are becoming active participants in corporate strategy, investment, and supply chain design.

Structure of the Deals

The administration’s approach is not uniform. Each agreement varies depending on the sector and company involved. Examples include:

Pharmaceuticals: Eli Lilly was asked to expand insulin production, Pfizer was pressed to increase output of its cancer and cholesterol drugs, and AstraZeneca was encouraged to establish a new U.S. headquarters. In exchange, companies have been offered tariff relief or regulatory flexibility.
Semiconductors: A portion of grants provided under the CHIPS Act has been converted into equity stakes, including a reported 10 percent stake in Intel.
Critical Minerals: The Department of Defense took a 15 percent stake in MP Materials, secured a floor price for future government purchases, and facilitated a $500 million supply agreement between MP Materials and Apple for rare earth magnets.
Energy: The Department of Energy has asked companies such as Lithium Americas for equity stakes in exchange for federal loans supporting domestic mining and battery production.

The unifying theme is the use of federal leverage, such as tariffs, financing programs, or regulatory approvals, to secure commitments from private companies that align with stated national security objectives.

Agencies as Dealmakers

What distinguishes this initiative is the scale of inter-agency involvement. The White House has described the approach as “whole of government.”

The Department of Health and Human Services is leading negotiations in pharmaceuticals.
The Department of Commerce, under Secretary Howard Lutnick, has overseen transactions in steel, semiconductors, and industrial manufacturing.
The Department of Energy is linking financing programs to equity arrangements in energy and mining.
The Pentagon has led negotiations with defense contractors and suppliers of critical minerals.

Senior officials, including White House Chief of Staff Susie Wiles and supply chain coordinator David Copley, are directly involved in negotiations. The presence of Wall Street dealmakers, such as Michael Grimes (formerly of Morgan Stanley) and David Shapiro (formerly of Wachtell, Lipton, Rosen & Katz), illustrates the administration’s transactional orientation.

Financing Mechanisms

The administration is using multiple sources of capital to finance these arrangements:

International Development Finance Corporation (DFC): Originally designed to support development projects abroad, the DFC has proposed expanding its budget authority from $60 billion to $250 billion. If approved by Congress, it would fund projects in infrastructure, energy, and critical supply chains within the U.S.
Investment Accelerator (Commerce Department): Seeded by $550 billion pledged by Japan as part of a bilateral trade agreement, this entity will direct capital into U.S. strategic sectors, serving as a replacement for an earlier proposal to establish a sovereign wealth fund.
Existing Programs: Agencies are repurposing funds from programs such as the CHIPS Act and Department of Energy loan guarantees, often converting grants into equity holdings.

Together, these mechanisms represent one of the largest coordinated federal interventions in U.S. industrial and supply chain development in recent decades.

Implications for Supply Chains

The administration’s policies carry several direct consequences for logistics and supply chain management.

1. Reshoring of Manufacturing

Many of the deals include explicit requirements for expanded U.S. production. This will increase demand for domestic transportation, warehousing, and distribution capacity. It also implies higher utilization of U.S. ports and intermodal corridors, as inputs shift from finished imports to raw materials and intermediate goods requiring processing inside the United States.

2. Critical Minerals and Energy Security

The focus on rare earths, lithium, and other inputs for advanced manufacturing indicates a restructuring of upstream supply chains. Logistics providers should expect increased flows from domestic mining regions, such as Nevada’s Thacker Pass lithium project, to processing and manufacturing centers. This represents a shift away from reliance on Asian supply hubs, particularly China.

3. Government as Stakeholder

Equity stakes and long-term purchase agreements create a different operating environment. Logistics providers serving these industries may find demand more stable due to government-backed contracts. However, these arrangements may also impose compliance requirements and reduce flexibility in adjusting supply networks.

4. Public-Private Coordination

Federal involvement in freight and industrial infrastructure financing could accelerate long-delayed projects. Rail expansion, port upgrades, and domestic warehouse capacity may benefit from this investment. Companies positioned to partner on these projects may see long-term opportunities.

Risks and Concerns

Several risks accompany this shift:

Policy Reversal: Executives have expressed concern that a future administration could unwind or renegotiate these deals. Supply chains built around government-backed agreements may face uncertainty if political priorities shift.
Equity Demands: Some companies are wary of ceding ownership stakes to the federal government. This creates hesitation in sectors where ownership control and investor confidence are sensitive.
Market Distortions: Critics argue that selecting which companies receive government support could disadvantage firms excluded from the arrangements, altering competitive dynamics within industries.
Implementation Capacity: The scale of proposed financing, particularly the expansion of the DFC, requires congressional approval and capable management. Delays or political opposition could slow execution.

Policy-to-Supply-Chain Impact Table

Policy Mechanism
Industry Example
Government Action
Supply Chain Impact

Tariff Relief
Pharmaceuticals (Pfizer, Eli Lilly)
Tariff exemptions in exchange for expanded U.S. production
Increases demand for domestic warehousing, distribution, and cold-chain logistics for added output

Equity Stakes
Intel (10% stake), MP Materials (15% stake)
Federal ownership through converted grants or Defense Production Act
Creates long-term stability in supply flows, but may add compliance requirements for logistics providers

Purchase Guarantees
MP Materials with Apple
Pentagon set floor prices, Apple committed to $500M supply contract
Locks in demand for rare earth shipments, increasing domestic transport flows from mining to manufacturing

Federal Loans Linked to Equity
Lithium Americas (DOE loan, 5–10% stake requested)
Loan support tied to partial government ownership
Supports new mining and battery projects, creating future logistics demand for raw materials and finished batteries

Investment Accelerator Funding
Commerce Department
$550B in financing, partly funded by Japan, allocated to U.S. manufacturing and freight infrastructure
Potential expansion of ports, intermodal rail, and distribution centers, reducing bottlenecks in supply chains

Expanded DFC Financing
Multiple critical industries
Proposed budget growth from $60B to $250B for U.S. supply chains and infrastructure
Large-scale capital for freight corridors, warehouses, and strategic materials, enabling reshoring of production

Case Examples

MP Materials

The rare earth mining company received federal backing through a 15 percent Pentagon stake, floor pricing commitments, and a supply agreement with Apple. This illustrates the administration’s template: equity participation, purchase guarantees, and private-sector co-investment.

Intel

The conversion of CHIPS Act funding into a 10 percent federal equity stake in Intel highlights the new approach to semiconductor supply chain security. By tying financial support to ownership, the government ensures both accountability and a direct role in strategic sectors.

Lithium Americas

A Department of Energy loan of $2.26 billion, paired with negotiations for a 5 to 10 percent federal equity stake, demonstrates how energy supply chains, particularly those tied to electric vehicles and batteries, are being secured through mixed financing and ownership arrangements.

Long-Term Outlook

The administration’s strategy marks a departure from the traditional U.S. model of private-sector–led industrial development. Instead, it resembles coordinated industrial policies pursued in other economies, though with American characteristics.

For supply chain professionals, this means that:

Government will play a larger role in shaping sourcing, production, and distribution decisions.
Access to federal financing and contracts will become a key factor in strategic planning.
Logistics infrastructure may receive substantial investment, creating new opportunities for providers.
Companies must assess political as well as market risks when designing long-term supply chains.

The Trump administration’s pre-midterm industrial deals reflect a significant realignment of government and industry roles in the United States. By leveraging tariffs, financing programs, and direct equity stakes, the federal government is reshaping supply chains across pharmaceuticals, energy, critical minerals, and freight.

The initiative is intended to secure domestic production, reduce reliance on China, and ensure access to strategic inputs. For logistics leaders, the result will be increased reshoring activity, new demand for domestic infrastructure, and closer integration of supply chains with federal priorities.

At the same time, risks remain. The durability of these arrangements depends on political continuity, effective implementation, and the willingness of companies to partner with government under new terms.

In this evolving environment, logistics and supply chain professionals will need to monitor policy developments as closely as they do market trends. Supply chains are no longer shaped solely by efficiency and cost considerations. They are now integral to the nation’s industrial strategy.

The post Federal Industrial Partnerships and Supply Chain Realignment Under the Trump Administration: Pharmaceuticals, Semiconductors, Critical Minerals, and Energy appeared first on Logistics Viewpoints.

Continue Reading

Non classé

Supply Chain and Logistics News Sept 29 – Oct 2nd 2025

Published

on

By

Supply Chain And Logistics News Sept 29 – Oct 2nd 2025

This week in supply chain news, major companies are demonstrating a mix of strategic adaptations and responses to global pressures. ExxonMobil and Kinaxis are collaborating to develop a next-generation supply chain management solution specifically for the complex oil and gas industry, aiming to increase resilience and provide comprehensive visibility. In a push for network efficiency, FedEx has launched a new direct cargo flight between Dublin, Ireland, and Indianapolis, Indiana, bypassing congested coastal hubs to reduce transit times. The pharmaceutical sector is also focused on resilience, with Eli Lilly and Amgen announcing significant U.S. manufacturing investments to bring critical drug production back to North America. Conversely, General Mills is restructuring its supply chain by closing three manufacturing plants in Missouri as a cost-saving measure in response to changing consumer spending habits. Finally, the U.S. government is imposing new tariffs on imported wood products and furniture, effective October 14, 2025, in a move to address what it identifies as a threat to the domestic industry and supply chain security.

The News of the Week:

ExxonMobil and Kinaxis are Developing a Next-Generation Supply Chain Management Solution for Oil and Gas

The oil and gas industry supply chain is one of the most complex in the world. It involves myriad complex production assets both onshore and offshore, transporting highly volatile products around the globe through pipelines, tank farms, ports, ships, rail, and truck. The end product could be gasoline, petrochemicals, natural gas, hydrogen, or any of hundreds of products from asphalt to motor oil. Disruptions to the oil and gas supply chain can have serious consequences for end users. The industry needs more comprehensive supply chain solutions that increase resilience, provide complete visibility across all aspects of the supply chain, and enable swift responses to business challenges and opportunities. Kinaxis and Exxon are collaborating to digitalize various sectors of Exxon’s business. They aim to leverage Kinaxis’s Maestro software to enhance planning and decision-making processes. Through this collaboration, the two companies aim to share solutions tailored to the oil and gas industry, which currently lacks supply chain management solutions that cater to their specific needs.

FedEx Expands Global Air Network with New Dublin- Indianapolis Route

In an effort to shorten transit times and strengthen its international network, FedEx has launched a new direct cargo flight between Dublin, Ireland, and Indianapolis, Indiana. The new four-day-a-week service bypasses traditional, more congested coastal gateways, which is expected to reduce shipping times by a full day for goods moving between Ireland and the U.S. Midwest. This strategic expansion is a response to the growing trade between the two regions and demonstrates how major carriers are adapting their networks to create more direct and efficient routes to meet evolving customer demands.

Eli Lily and Amgen Announce Massive U.S. Manufacturing Investments

In a major push for domestic drug production, pharmaceutical giants Eli Lilly and Amgen have announced huge investments in new U.S. manufacturing facilities. Eli Lilly is planning a new $6.5 billion factory in Houston, while Amgen is expanding its Puerto Rico plant with a $650 million investment. These moves are a direct response to the global supply chain vulnerabilities exposed in recent years and represent a significant effort to boost the resilience of the U.S. pharmaceutical supply chain. The investments aim to bring critical drug production back to North America, creating jobs and reducing reliance on overseas manufacturing.

General Mills is Closing Three Manufacturing Plants in Missouri

General Mills is closing three manufacturing plants in Missouri—a pizza crust facility in St. Charles and two pet food locations in Joplin—as part of a multiyear supply chain restructuring effort. The company expects to incur $82 million in restructuring charges, including asset write-offs and severance costs. This action is part of a broader trend among food and beverage companies to implement cost-saving measures in response to consumer spending pullbacks. The closures follow previous organizational actions by General Mills, such as job cuts and the closure of its innovation unit, and are intended to improve the company’s competitiveness.

US to Begin Furniture, Wood Import Tariffs on Oct. 14

New tariffs on imported wood products, including furniture, will take effect on October 14, 2025, following a Section 232 national security investigation. The initial duties will be 10% on softwood lumber and 25% on upholstered furniture, kitchen cabinets, and vanities. On January 1, the tariff rates are scheduled to increase to 30% for upholstered furniture and 50% for kitchen cabinets and vanities. The executive order provides for lower tariff caps for imports from specific trading partners, such as the U.K., Japan, and the European Union. These new tariffs are intended to address what the administration has identified as a threat to domestic industry and supply chain security.

Song of the week:

The post Supply Chain and Logistics News Sept 29 – Oct 2nd 2025 appeared first on Logistics Viewpoints.

Continue Reading

Non classé

Call for Speakers: Ready to Drive Real Change in Intelligent Operations and Resilient Supply Chains – ARC Industry Forum 2025

Published

on

By

Call For Speakers: Ready To Drive Real Change In Intelligent Operations And Resilient Supply Chains – Arc Industry Forum 2025

Call for Speakers – ARC Industry Forum 2025

The ARC Industry Forum is the premier event where operations, supply chain, and technology leaders gather to shape the future of intelligent and resilient enterprises. In 2025, supply chains face unprecedented disruption, but also unmatched opportunity. We are seeking speakers—executives, practitioners, and innovators—who can share strategies, frameworks, and real-world experiences to inspire and guide their peers.

Sample Session Themes

To help illustrate the types of topics we feature, here are a few recent examples:

The New Frontier of Operations and Supply Chain: AI, Resilience, and Intelligence – Exploring how AI, analytics, automation, and connected intelligence converge to deliver agility and resilience.
Building Resilient Supply Chains in the Age of Shifting Geopolitics – Addressing the regulatory, tariff, and policy challenges facing global supply networks.
Unlocking the Power of Knowledge Transfer in Enterprise Systems – Showcasing best practices to fully leverage enterprise and knowledge management systems.

These examples are only a sample of the many tracks available. Additional sessions will cover digital transformation, sustainability, cybersecurity, workforce strategies, and other timely topics.

Submission Guidelines

We invite proposals that highlight real-world case studies, practical lessons, and strategic frameworks. Presentations should be vendor-neutral, educational, and tailored for an audience of senior executives and practitioners.

If you are interested in speaking, please submit:

A proposed session title and abstract (150–250 words)
Key takeaways for attendees
Speaker bio and organizational role

To submit a proposal, or simply for more information, contact us now

The post Call for Speakers: Ready to Drive Real Change in Intelligent Operations and Resilient Supply Chains – ARC Industry Forum 2025 appeared first on Logistics Viewpoints.

Continue Reading

Trending