Non classé
The Critical Role of Provenance in Cybersecurity and Supply Chains
Published
1 an agoon
By
The Power Inverter Kill Switch Story Underlines The Importance Of Provenance in Cybersecurity and the Supply Chain
Do you really know what your production assets contain?
If you’ve ever bought antiques, you’re probably familiar with the concept of provenance. I have relatives that own a dresser that was gifted from George Washington to a family friend when he was a lieutenant in the colonial army. How do we know this? Because of the authenticated documentation that came with the dresser proving its origin. This is provenance – proving and documenting where something came from, what it contains, and the path it took before it wound up in your possession.
Heavy assets in industrial automation are a lot more complex than antiques, and the stakes are a lot higher, as we saw recently with the story about cellular powered kill switches found in Chinese manufactured power inverters used in solar and wind farms. In addition to being used around the world for renewable power applications, these inverters are also used in batteries, heat pumps, EV chargers, and other assets.
It’s typical for these products to have remote access capabilities, but these connections are normally handled through firewalls. You may have read the story about Chinese manufactured cranes that have remote connectivity capabilities but are largely unsecured. Many end users were not even aware of these remote communication capabilities, or if they were, they were improperly secured. If your assets come with features and functions that present a potential cybersecurity risk to your enterprise and you don’t address it or are not aware of it even though it is documented, that’s ultimately your responsibility, not the vendor’s.
The Problem of Rogue Components
It’s not always obvious what all the components are in an asset, be they hardware or software. The more complex the asset, the more complicated the issue becomes. In the case of the power inverters, the communication devices were undocumented, and asset owners did not even know they were there. The devices were found by a US-based team of experts whose job was to strip these assets down and identify their components. According to the Reuters article referenced in the above link, the “rogue components provide additional, undocumented communication channels that could allow firewalls to be circumvented remotely, with potentially catastrophic consequences.”
What is Provenance in Cybersecurity?
In the world of cybersecurity, provenance is more than just the source of origin. According to NIST, provenance is “The chronology of the origin, development, ownership, location, and changes to a system or system component and associated data. It may also include personnel and processes used to interact with or make modifications to the system, component, or associated data.” So, it’s more than just where the product came from, it includes all the associated data about what the asset or “component” contains from both a hardware and software standpoint.
Large Power Transformers In a Storage Yard: Source: IEEE SpectrumSBOMs: What’s in Your Software?
The concept of software bills of materials (SBOM) has emerged as an important element of cybersecurity. In simple terms it contains the details and supply chain relationships of various components used in building software. Those who produce, purchase, and operate software use it to improve their understanding of what components are in the systems. This in turn has multiple benefits, most notably the potential to track known and newly emerged vulnerabilities and risks. This concept applies to all systems, including those used for manufacturing operations and control.
SBOMs are becoming increasingly mandated in new regulations across a wide range of industries. Thee White House’s 2021 Executive Order on Improving the Nation’s Cybersecurity mandated that federal agencies receive SBOMs for software they purchase. The EU’s Cyber Resilience Act (CRA) requires manufacturers of digital products sold in the EU to produce a top-level SBOM.
HBOMs: What’s in Your Hardware?
Unfortunately, SBOMs don’t do much to identify the various hardware components in an asset or system and where they come from. For that, you need an HBOM or hardware bill of materials, which should provide a detailed inventory of the hardware components included in an asset or system. CISA has its own Hardware Bill of Materials Framework for Supply Chain risk Management that you can review here and download.
HBOMs are relevant to any hardware asset, from a DCS controller or a field device like a pressure transmitter all the way up to large transformers. The larger and more complex the asset is, the more important it is to have a complete HBOM and SBOM. Take the example of large power transformers (LPTs), which again are largely sourced from China, are often custom built, and contain many hardware and software components. Many times, we don’t even know what’s in these large assets until we completely tear them down. A Chinese power transformer was sent to Sandia National Laboratory (SNL) for inspection in 2020, but even those results are classified.
End Users Need to Take Supply Chain Cybersecurity Seriously
SBOMs and HBOMs are all part of the larger issue of supply chain cybersecurity. Compiling an accurate inventory of installed systems has long been considered as one of the first steps in a cybersecurity program. Simply identifying such assets is no longer sufficient. Potential supply chain related risks can only be addressed if the provenance of all components in those assets is known. When assessing or procuring software systems or hardware it is very important to ask the supplier to list the components in the product. This may take the form of a software or hardware bill of material, but such a formal presentation may not be necessary. If the supplier is unwilling or unable to provide this information, then this should be considered when making buying choices.
Other aspects of supply chain cybersecurity include evaluating the cybersecurity posture of your software and service partners. The importance of this was shown in the SolarWinds attack. End users are increasingly reliant on their technology and service partners to keep things running, but if your partners have poor cyber resilience, it can and will directly affect your operations at some point.
The US National Institute of Standards and Technology (NIST) provides guidance for supply chain cybersecurity in the form of a special publication titled “Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations.” This document describes how to identify, assess, and respond to cybersecurity risks throughout the supply chain at all levels of an organization. It offers key practices for organizations to adopt as they develop their capability to manage cybersecurity risks within and across their supply chains.
The post The Critical Role of Provenance in Cybersecurity and Supply Chains appeared first on Logistics Viewpoints.
You may like
Non classé
Last Chance: Join the Webinar on AI, Component Sourcing, and the Future of Procurement
Published
1 jour agoon
22 juin 2026By
Electronic component sourcing is becoming one of the most important cost and risk challenges facing manufacturers.
Pricing remains opaque. Supplier quotes do not always reflect true market pricing. Internal purchase history may show what a company paid, but not whether that price was competitive.
At the same time, chips and components are increasingly tied to geopolitics, tariffs, AI infrastructure, defense demand, electrification, industrial automation, and supply chain resilience.
The webinar is tomorrow at 11 AM ET. Register now to join ARC Advisory Group’s discussion, The Hidden Cost of Component Sourcing — and How AI Is Fixing It, featuring Jim Frazer in conversation with Lytica CEO Martin Sendyk.
This is a practical conversation for procurement, supply chain, engineering, operations, and executive leaders who are trying to understand how component sourcing is changing.
Manufacturers need to control cost, protect supply, support product launches, and manage risk in a market where visibility is often limited. Overpayment can remain hidden. Component risk can appear too late. Engineering and procurement decisions can become locked in before teams have enough market intelligence to make the best sourcing choices.
Tomorrow’s webinar will examine why traditional approaches to component sourcing are under pressure and how manufacturers can use better intelligence to identify hidden cost, improve benchmarking, and manage sourcing risk more effectively.
Attendees will learn:
Why electronic component pricing remains difficult to benchmark
How hidden overpayment can persist inside normal procurement activity
Why supplier quotes, list prices, and internal history are not enough
How real transactional data can improve pricing visibility
Why geopolitics, AI demand, tariffs, electrification, and defense demand are changing the sourcing risk equation
How AI and sourcing intelligence can help procurement teams make better cost and risk decisions
The issue is no longer only whether a company can secure supply.
The issue is whether it can secure the right components, at the right price, with the right risk profile, early enough to influence the business outcome.
For many manufacturers, that requires a more transparent, data-driven, and intelligence-led sourcing model.
Register now for the ARC Advisory Group webinar with Jim Frazer and Lytica CEO Martin Sendyk before the session begins tomorrow at 11 AM ET.
Register for the Webinar
The Hidden Cost of Component Sourcing — and How AI Is Fixing It
Date: June 23, 2026
Time: 11:00 AM ET
Location: Online
Speakers: Jim Frazer, Vice President, ARC Advisory Group, and Martin Sendyk, CEO, Lytica
If your organization manages a significant electronic component spend, this webinar will help you understand how AI and transactional market data can expose hidden sourcing costs and turn procurement into a more proactive system of intelligence.
Register now to reserve your spot.
The post Last Chance: Join the Webinar on AI, Component Sourcing, and the Future of Procurement appeared first on Logistics Viewpoints.
Non classé
Weekly Supply Chain and Logsitics News Round Up (June 15th-18th 2026)
Published
5 jours agoon
19 juin 2026By
This week in logistics, the industry faces a pivotal shift as Transportation Management Systems evolve into ‘decision intelligence’ hubs, moving beyond basic routing to become the core operating brain of the supply chain. Meanwhile, operational complexity reaches new heights with the massive logistical undertaking of the 2026 FIFA World Cup, even as trade tensions show signs of cooling following the European Parliament’s approval of a landmark EU-US tariff relief deal. From record-breaking automation at Nestlé’s new California hub to the fluctuating volatility of global air freight rates, these developments underscore a sector increasingly defined by high-tech integration and rapid adaptation to global market forces.
The Leading Supply Chain and Logistics Stories of the Week:
TMS Is Becoming Less of a Routing Tool and More of a Decision Intelligence Layer Beyond Execution
The role of the Transportation Management System (TMS) is undergoing a major paradigm shift. While traditional evaluations still focus heavily on execution-level metrics—like route optimization, automated tendering, and freight audit capabilities—these features have essentially become table stakes. Moving forward, the true strategic value of a TMS lies in its evolution from execution software to “transportation decision infrastructure.” Rather than just completing transactions, next-generation platforms serve as the continuous decision-making layer of the supply chain. By drawing data from across the entire network, integrating external market signals, and resolving multi-functional bottlenecks, modern TMS solutions are transitioning into the core operating brain that synchronizes movement, cost, and service levels in real time.
The Logistics Issue: The Supply Chains Behind the World Cup
While most fans focus entirely on the action on the pitch, supply chain professionals are watching what might be the most complex logistical undertaking in sporting history: the 2026 FIFA World Cup. Spanning three host nations—the United States, Canada, and Mexico—the sheer scale of the tournament requires moving more than twenty million pounds of equipment, coordinated across 5,000 vehicles and millions of square feet of warehouse space. The challenge isn’t just massive volume; it’s the absolute lack of tolerance for delay or error across highly regulated international borders. Industry experts point out that success hinges on establishing a unified ecosystem in which freight forwarders, customs officials, and vendors collaborate in real time. Crucial to this effort are standardized product identification and cloud-based labeling networks, which ensure that every critical piece of equipment, food shipment, and medical supply is fully traceable and compliant with differing regional mandates—proving that at this scale, elite collaboration is the only way to avoid catastrophic bottlenecks.
Transatlantic Trade Relief: European Parliament Greenlights EU-US Tariff
In a major relief to transatlantic supply chain operators, the European Parliament has officially voted to implement the long-awaited trade agreement with the United States. Under the newly approved legislation, the EU will eliminate tariffs on all American industrial goods and grant preferential market access to key U.S. agricultural and seafood shipments. In return, the U.S. has agreed to cap import tariffs on European products at 15%—effectively averting threatened 25% tariff hikes on European-built vehicles. Importantly for logistics planners, the deal incorporates a “defensive toolbox” to mitigate long-term trade volatility, including a sunset clause set for late 2029, a safeguard mechanism to protect EU markets from disruptive import surges, and strict conditions that allow the EU to suspend tariff preferences by the end of 2026 if the U.S. fails to lower existing duties on European steel and aluminum derivatives.
Nestlé Opens Its Largest and Most Technologically Advanced Distribution Center in the U.S.
Nestlé USA has officially unveiled its new 700,000-square-foot distribution hub in Arvin, California. Equipped with a $330 million price tag, the state-of-the-art facility represents a critical step in the company’s broader $25 billion U.S. infrastructure upgrade, emphasizing a pivot toward leaner, automation-first supply chain workflows. The Arvin facility houses the largest Automated Storage and Retrieval System (ASRS) in Nestlé’s global network, operating alongside laser-guided vehicles, automated crane systems, and layer-picking robotics. This build marks a major shift from retrofitting existing spaces to intentionally designing high-tech capabilities directly into greenfield logistics layouts from day one. Designed to mitigate peak-season labor bottlenecks, upskill the frontline workforce, and run on 100% renewable electricity as a zero-waste site, the facility showcases how global leaders are leveraging heavy automation to establish flexible, resilient distribution networks that protect margins against ongoing labor and capacity constraints.
Air Freight Spot Rates Spike 41% YoY in May, but Relief Is Expected Soon
Global air cargo spot rates surged by 41% year-over-year in May, averaging $3.40 per kilogram, driven by persistent geopolitical disruptions, carrier fuel surcharges, and localized demand booms like semiconductor and data center equipment shipments. According to Xeneta data, spot rates from Northeast and Southeast Asia to North America jumped nearly 40% compared to earlier this year. However, the pricing pressure isn’t uniform; transatlantic lanes from Europe to North America actually saw a 26% decline over the same period. For procurement teams battling these elevated costs, there is a glimmer of light on the horizon. Long-term contract rates appear to have peaked in April, and as carriers restore capacity and the market enters its traditional summer lull, analysts predict that year-over-year spot rate comparisons will finally begin to cool down, offering much-needed breathing room for shippers who have been relying on short-term contract extensions.
Song of the week:
The post Weekly Supply Chain and Logsitics News Round Up (June 15th-18th 2026) appeared first on Logistics Viewpoints.
Non classé
Why Octave’s Austin Event Matters: From Asset Lifecycle Software to Intelligence at Scale
Published
6 jours agoon
17 juin 2026By
Octave Live OnTour Austin takes place at a consequential point in the evolution of the industrial software market. Asset-intensive organizations are under sustained pressure to improve capital project execution, asset reliability, operational resilience, safety, quality, cybersecurity, and workforce productivity. At the same time, they are being asked to make better use of data and apply AI in ways that are practical, governed, and operationally relevant.
This is the context in which Octave’s Austin event should be evaluated.
Octave, the software spin-off from Hexagon AB, brings together software assets across engineering, construction, geospatial intelligence, asset operations, quality, public safety, physical security, and industrial cybersecurity. Its Design, Build, Operate, and Protect framework provides a clear structure for organizing those capabilities around the industrial asset lifecycle.
However, the strategic significance of the event is not limited to Octave’s portfolio structure. The more important issue is what Octave’s positioning indicates about the broader direction of industrial software.
The market is shifting from digitized workflows toward intelligence at scale.
Industrial Software Is Moving Beyond Functional Digitization
For much of the past two decades, industrial software investment has centered on functional digitization. Engineering teams adopted design, modeling, analysis, and engineering information management tools. Construction teams deployed project controls and field execution systems. Operations teams invested in EAM, APM, optimization, and reliability applications. Quality, safety, physical security, and cybersecurity functions developed their own specialized technology environments.
These investments created meaningful value within individual domains. But they also reinforced a long-standing structural problem: industrial work is highly interconnected, while the supporting software environment often remains fragmented.
A design change can alter construction cost and schedule. Construction execution quality can affect commissioning performance. Poor handoff from construction to operations can increase maintenance burden. Maintenance backlog can elevate safety and compliance risk. A cybersecurity incident can become an operational disruption. A public safety event may require geospatial, security, asset, and operational context at the same time.
This is the gap that lifecycle intelligence seeks to address.
Lifecycle Intelligence Requires Context Across the Asset Lifecycle
Octave’s Design, Build, Operate, and Protect framework is meaningful because it reflects how industrial assets are planned, built, used, maintained, protected, and improved over time.
In the Design domain, Octave can address engineering, modeling, analysis, information management, and geospatial intelligence. In Build, the portfolio extends into construction, supply chain management, and project performance. In Operate, the focus expands to operations optimization, asset performance, enterprise asset management, quality, compliance, and risk. In Protect, Octave’s positioning includes public safety, physical security, and industrial cybersecurity.
Individually, these are established industrial software categories. Collectively, they suggest a broader strategic direction: the use of software to preserve, connect, and operationalize context across the asset lifecycle.
That is where the Austin event becomes important. Customers and partners should look for evidence that Octave is moving beyond portfolio aggregation toward a more integrated model of lifecycle intelligence.
Intelligence at Scale Depends on Integration, Data, and Workflow Relevance
The phrase “intelligence at scale” should be interpreted operationally, not rhetorically. In industrial environments, intelligence at scale means that software can connect relevant data, apply domain context, and support better decisions across complex workflows.
This requires more than analytics dashboards. It requires software that can help users understand the implications of decisions across functions. It also requires a data foundation that connects engineering data, project execution status, asset histories, maintenance records, geospatial information, quality events, safety incidents, and cybersecurity signals.
AI increases the importance of this foundation. AI capabilities will have limited enterprise value if they are disconnected from operational systems and industrial context. The more material opportunity is AI that is embedded in real workflows and supported by trusted domain data.
For Octave, the strategic question is whether its portfolio can support AI-enabled decision-making across the asset lifecycle, rather than isolated AI features within individual applications.
The Event Should Be Assessed as a Roadmap Signal
Buyers should treat Octave Live OnTour Austin as a roadmap signal.
The first area to assess is integration. Octave’s portfolio breadth creates potential value, but customers will need clarity on how the company intends to connect products and workflows over time. Important indicators include shared data models, workflow orchestration, user experience consistency, API strategy, and cross-domain analytics.
The second area is AI. Customers should listen for specific use cases, not general AI messaging. Relevant examples could include project risk identification, asset performance optimization, maintenance prioritization, quality exception management, safety response, cyber risk monitoring, or engineering decision support. The key issue is whether AI is being tied to operational outcomes.
The third area is ecosystem fit. Industrial organizations rarely standardize on a single vendor across the full technology landscape. Octave will need to clarify how its offerings interact with ERP, EAM, APM, MES, PLM, project controls, cybersecurity, and analytics environments. The value proposition must be additive without increasing architectural complexity.
The fourth area is sequencing. Broad portfolios require disciplined execution. A credible roadmap should identify where Octave will focus first, what integration steps matter most, and how customers should think about value realization over time.
Broader Market Implications
Octave’s Austin event matters because it reflects a larger shift in industrial software.
The next stage of the market will not be defined solely by applications that digitize individual workflows. It will be defined by platforms and architectures that connect operational context across functions. This does not mean every customer will consolidate around a single software suite. Industrial technology environments will remain heterogeneous. But the strategic requirement for connected data, workflow continuity, and decision support will continue to intensify.
AI will accelerate this trend. Effective AI depends on relevant context. If industrial data remains trapped in disconnected systems, AI will be limited to narrow productivity assistance. If data and workflows are connected, AI can support higher-value decisions involving risk, reliability, performance, safety, and resilience.
That is why lifecycle intelligence is becoming an important industrial software concept. It reflects the need to move from systems that record activity to systems that help organizations understand and act on operational complexity.
ARC Advisory Group Perspective
Octave has a credible opportunity to participate in this market transition. The company has meaningful software assets across multiple industrial domains, and its Design, Build, Operate, and Protect framework provides a practical way to organize the portfolio.
The central question is execution. Octave will need to demonstrate that its portfolio can become more than a set of adjacent capabilities. Customers will expect integration clarity, practical AI use cases, ecosystem openness, and a roadmap that connects near-term value to a longer-term lifecycle intelligence strategy.
For buyers, the Austin event should be used to evaluate roadmap direction and strategic fit. For partners, it should clarify Octave’s intended role in the industrial software ecosystem. For the broader market, it is another indication that industrial software is moving toward connected intelligence at scale.
The companies that define this next phase will not simply digitize industrial work. They will connect context across the asset lifecycle and convert that context into better decisions.
The post Why Octave’s Austin Event Matters: From Asset Lifecycle Software to Intelligence at Scale appeared first on Logistics Viewpoints.
Last Chance: Join the Webinar on AI, Component Sourcing, and the Future of Procurement
Weekly Supply Chain and Logsitics News Round Up (June 15th-18th 2026)
Why Octave’s Austin Event Matters: From Asset Lifecycle Software to Intelligence at Scale
Why Sulfuric Acid Is Emerging as a Supply Chain Constraint in Copper
Walmart and the New Supply Chain Reality: AI, Automation, and Resilience
13 Books Logistics And Supply Chain Experts Need To Read
Trending
-
Non classé2 mois agoWhy Sulfuric Acid Is Emerging as a Supply Chain Constraint in Copper
-
Non classé1 an agoWalmart and the New Supply Chain Reality: AI, Automation, and Resilience
- Non classé10 mois ago
13 Books Logistics And Supply Chain Experts Need To Read
- Non classé8 mois ago
Ex-Asia ocean rates climb on GRIs, despite slowing demand – October 22, 2025 Update
- Non classé3 semaines ago
Container rates starting to spike on peak season rush – June 2, 2026 Update
- Non classé5 mois ago
Container Shipping Overcapacity & Rate Outlook 2026
-
Non classé1 an agoAmazon and the Shift to AI-Driven Supply Chain Planning
- Non classé4 mois ago
Ocean rates ease as LNY begins; US port call fees again? – February 17, 2026 Update
