Connect with us

Non classé

Iranian-Affiliated Cyber Actors Target Programmable Logic Controllers in U.S. Critical Infrastructure Supply Chains

Published

on

Iranian Affiliated Cyber Actors Target Programmable Logic Controllers In U.s. Critical Infrastructure Supply Chains

CISA has released this alert on Tuesday, April 7. End users should be aware that Iranian-backed threat actors are now actively targeting PLCs in US critical infrastructure and manufacturing. You can read the full alert here. The following is directly from the alert:

Iran-affiliated advanced persistent threat (APT) actors are conducting exploitation activity targeting internet-facing operational technology (OT) devices, including programmable logic controllers (PLCs) manufactured by Rockwell Automation/Allen-Bradley. This activity has led to PLC disruptions across several US critical infrastructure sectors through malicious interactions with the project file and manipulation of data on human-machine interface (HMI) and supervisory control and data acquisition (SCADA) displays, resulting in operational disruption and financial loss.

US organizations should urgently review the tactics, techniques, and procedures (TTPs) and indicators of compromise (IOCs) in this advisory for indications of current or historical activity on their networks and apply the recommendations listed in the Mitigations section of this advisory to reduce the risk of compromise.

Affected Products

Rockwell Automation/Allen-Bradley-manufactured PLCs

Potentially other branded PLCs

Key Actions

Remove PLCs from direct internet exposure via a secure gateway and firewall.

Query available logs for the provided IOCs in the corresponding time frames.

For Rockwell Automation devices, place the physical mode switch on the controller into run position. Contact the authoring agencies and Rockwell Automation for guidance if you believe your organization was targeted.

The Federal Bureau of Investigation (FBI), Cybersecurity and Infrastructure Security Agency (CISA), National Security Agency (NSA), Environmental Protection Agency (EPA), Department of Energy (DOE), and United States Cyber Command – Cyber National Mission Force (CNMF), hereafter referred to as the “authoring agencies,” are urgently warning US organizations of ongoing cyber exploitation of internet-connected operational technology (OT) devices, including Rockwell Automation/Allen-Bradley-manufactured programmable logic controllers (PLCs), across multiple US critical infrastructure sectors. As a result of this activity, organizations from multiple US critical infrastructure sectors experienced disruptions through malicious interactions with the project files¹ and the manipulation of data displayed on human-machine interface (HMI) and supervisory control and data acquisition (SCADA) displays. In a few cases, this activity has resulted in operational disruption and financial loss.

Check available logs for suspicious traffic on the ports associated with OT devices, including 44818, 2222, 102, and 502, especially traffic originating from overseas hosting providers.

Due to the widespread use of these PLCs and the potential for additional targeting of other branded OT devices across critical infrastructure, the authoring agencies recommend US organizations urgently review the tactics, techniques, and procedures (TTPs) and indicators of compromise (IOCs) in this advisory for indications of current or historical activity on their networks and apply the recommendations listed in the Mitigations section to reduce the risk of compromise.

The authoring agencies assess that a group of Iranian-affiliated advanced persistent threat (APT) actors is conducting this activity to cause disruptive effects within the United States. The group has targeted devices spanning multiple US critical infrastructure sectors, including Government Services and Facilities (to include local municipalities), Water and Wastewater Systems (WWS), and Energy Sectors. The authoring agencies previously reported on similar activity targeting PLCs by CyberAv3ngers (aka Shahid Kaveh Group)—a cyber threat actor affiliated with Iran’s Islamic Revolutionary Guard Corps (IRGC) Cyber Electronic Command (CEC).

If owners and operators discover an affected internet-accessible device in their environment, additional technical measures may be necessary to evaluate the risk of compromise. Please contact the authoring agencies and applicable vendors through existing support channels available to customers and integrators (see Contact Information) to receive support, mitigation, and investigation assistance, and engage your cyber incident response plans.

The post Iranian-Affiliated Cyber Actors Target Programmable Logic Controllers in U.S. Critical Infrastructure Supply Chains appeared first on Logistics Viewpoints.

Continue Reading

Non classé

Decision Latency: The Hidden Cost in Modern Supply Chains

Published

on

By

Decision Latency: The Hidden Cost In Modern Supply Chains

In modern supply chains, disruption does not always begin with a weather event, a port closure, or a supplier failure. It often begins inside the decision cycle itself, where fragmented data, unclear ownership, and slow escalation turn manageable issues into measurable cost.

Supply chain leaders have spent the last several years responding to visible disruption. Port congestion, labor shortages, geopolitical instability, and shifting demand patterns have all exposed weaknesses across global networks. But many of the most persistent costs in supply chain operations do not begin with the disruption itself. They begin with the organization’s response.

This is the problem of decision latency.

Decision latency is the time between recognizing that conditions have changed and taking effective action. In modern supply chains, that delay can be more damaging than the original event. A late shipment becomes a stockout because no one reallocated inventory in time. A supplier issue becomes a margin problem because escalation occurred after the available options narrowed. A demand shift becomes a service failure because the replenishment response moved too slowly.

In many operations, the physical supply chain is moving faster than the management system wrapped around it.

That matters because modern supply chains operate with tighter service expectations, less slack, more dependencies, and more frequent exceptions. In that environment, visibility alone is not enough. Companies can have dashboards, alerts, and analytics in place and still underperform if decisions remain slow, fragmented, or politically constrained.

Decision latency is not a soft organizational issue. It is an operating cost.

Visibility is not the same as responsiveness

Most supply chain organizations have invested heavily in visibility. They have better planning systems, better transportation tracking, more data feeds, and more dashboards than they had even a few years ago. But more signal does not automatically produce faster response.

In some cases, it has the opposite effect. Teams receive more alerts, more metrics, and more exceptions, but still lack a clear path to action. A planner sees the problem, but not the authority to act. Procurement identifies a supplier risk, but has no mechanism to trigger a coordinated response. Transportation sees capacity tighten, but needs approvals that arrive after the best options are gone.

The result is a common pattern: companies improve awareness without improving execution.

This is why decision latency deserves closer attention than generic calls for more visibility. The issue is not always whether the organization can see the problem. The issue is whether it can decide in time to preserve the best option set.

Where the cost shows up

Decision latency rarely appears as a formal KPI, but its effects are visible across the operating model.

One impact is inventory distortion. When response speed is unreliable, organizations compensate with more stock. Safety stock becomes protection not just against demand variability or supply uncertainty, but against slow internal decision-making. Over time, this weakens inventory productivity and hides the real source of instability.

Another impact is service erosion. A manageable disruption becomes a missed customer commitment when the response window is allowed to shrink. The longer an organization waits to act, the fewer recovery options remain.

Cost inflation is another consequence. Premium freight, expediting, last-minute sourcing changes, schedule reshuffling, and reactive labor decisions are often treated as disruption costs. In many cases, they are delay costs. The disruption created the condition. The slow response increased the financial damage.

There is also an organizational cost. When decisions move too slowly, teams begin to work around the formal operating model. Informal escalation paths take over. Exceptions become routine. People rely less on process discipline and more on personal intervention. That may solve some short-term problems, but it weakens operating consistency over time.

Why modern supply chains are more exposed

Decision latency is not new, but several structural shifts have made it more expensive.

First, many supply chains now operate with less buffer. Inventories are leaner, transportation conditions are tighter, and customer tolerance for delay is lower. That narrows the recovery window.

Second, dependencies have multiplied. A single issue can affect sourcing, logistics, manufacturing, customer fulfillment, compliance, and finance at the same time. That raises the penalty for hesitation.

Third, organizations now process far more data than before, but governance structures often remain slower than the business environment they are trying to manage. Monthly planning cycles and weekly review cadences still matter, but they are often too slow to govern exception-driven operations on their own.

Finally, many companies modernize systems without redesigning decisions. They implement new tools but leave untouched the questions that matter most: Who decides? Under what thresholds? With what information? On what timeline?

If those questions are unresolved, the underlying bottleneck remains.

Decision latency is usually a design problem

It is easy to describe slow decisions as bureaucracy. But in most cases, the problem is more specific. It is a design failure inside the operating model.

There are four common forms of decision latency.

The first is informational latency. Relevant data exists, but it is delayed, fragmented, or presented in a way that does not support action.

The second is interpretive latency. Different functions see the same issue but frame it differently. The signal is visible, but the meaning is contested.

The third is procedural latency. The organization knows what should happen, but approvals, meetings, and escalation paths delay execution.

The fourth is ownership latency. A cross-functional problem emerges, but no one has clear authority to make the required tradeoff.

These forms of latency often overlap. A shipment delay may begin as a data issue, become an argument over implications, and end in an ownership gap. By the time action is taken, the cost of recovery has already risen.

Seen this way, decision latency is not simply slow management. It is accumulated structural drag.

Technology only helps if it shortens the path to action

Supply chain technology vendors rightly emphasize visibility, orchestration, and intelligence. Those capabilities matter. But the real test is not whether technology produces more insight. It is whether it shortens the path from signal to action.

A control tower that generates alerts without assigning decision ownership may improve awareness but not response. A predictive model that identifies disruption risk but is not embedded in operating workflows may improve analysis without changing outcomes. A planning system that produces better recommendations still depends on whether someone can act on those recommendations within the right window.

Technology reduces decision latency when it does three things well.

First, it improves signal quality by elevating the issues that matter most.

Second, it creates shared context so functions are not reacting to different versions of reality.

Third, it supports governed action through clear thresholds, workflows, and decision rights.

That is the more useful standard for judging digital maturity. The question is not just whether the system is intelligent. It is whether the operating model becomes more responsive because of it.

What supply chain leaders should do

The first step is to treat decision speed as an operational capability rather than a cultural aspiration. Leaders should ask where in the supply chain decisions routinely arrive too late to preserve the best available option. That is usually more valuable than asking where the organization needs more data.

The second step is to map decision flows, not just process flows. Most organizations understand how inventory, orders, and shipments move. Fewer understand how exceptions move, who owns them, what thresholds trigger action, and where delay accumulates.

The third step is to clarify decision rights. Not every issue should escalate. Many operational decisions can move faster if authority is defined more explicitly and tied to clear business rules.

The fourth step is to examine metrics and incentives. Functional KPIs often reinforce hesitation when enterprise tradeoffs are required. If teams are measured too narrowly, they may delay action that is rational for the network but uncomfortable for their own function.

Finally, leaders should measure response time directly. Forecast accuracy, inventory turns, and service levels remain important, but they do not fully capture how quickly the organization detects, escalates, decides, and acts.

Decision speed is now a competitive variable

For years, supply chain performance has been evaluated through cost, service, and asset efficiency. Those metrics still matter. But underneath them sits a capability that increasingly separates stronger operators from weaker ones: the ability to make sound decisions quickly under changing conditions.

That capability affects how much inventory a company truly needs, how much disruption turns into cost, and how often local issues spread across the network. It shapes the value of digital investments and the degree to which resilience is real rather than theoretical.

In that sense, decision speed is not a managerial convenience. It is part of the operating model.

Companies that continue treating latency as a minor internal issue will keep paying for it through expediting, excess inventory, service failures, and avoidable internal friction. Companies that design for faster, clearer, better-governed decisions will operate with more control and less waste.

In modern supply chains, delay is not only something that happens at the port, on the road, or on the factory floor.

It also happens in the time between knowing and acting.

The post Decision Latency: The Hidden Cost in Modern Supply Chains appeared first on Logistics Viewpoints.

Continue Reading

Non classé

A Faster Path to Supply Chain Planning: PPF’s Co-Development Story with ketteQ

Published

on

By

A Faster Path To Supply Chain Planning: Ppf’s Co Development Story With Ketteq

When a supply chain team decides to integrate a new enterprise solution, such as Supply Chain Planning, there is a general understanding that the process is lengthy and requires effort. The integration of a new solution is usually driven by the need to overcome organizational and technical inefficiencies. In a world of constant supply chain disruption and consumers expecting lightning-fast delivery, supply chain teams have never been more pressured to achieve high levels of efficiency.

Today’s customer case story features a company that sought out a new solution from a legacy provider and was left dissatisfied with the results. Back to manual Excel entries, the company could not afford another lengthy implementation process. Luckily enough, they found a solution provider who agreed to build out a custom tool to address their issues while not requiring an entire rip and replace.

Philipp Bruckner Breaks Down PPF’s Supply Chain and Manufacturing Operations

I had the opportunity to sit down with Philipp Bruckner, Senior Manager of Supply Chain Development at Partner in Pet Food (PPF), a leading pet food manufacturer in Europe.

PPF is responsible for multiple production facilities across Europe, serving customers all over Europe. They faced significant challenges in supply planning due to complex production requirements, tight margins, and the need for high efficiency. Their business model centers on private label manufacturing for supermarket chains and pet specialists, while also managing a portfolio of own brands, requiring flexible and efficient production runs to accommodate different languages, formats, and packaging requirements across markets.

PPF initially implemented a demand planning solution from a legacy provider, which worked well for forecasting but encountered obstacles when extending to supply planning, particularly in production planning and master production scheduling. The legacy provider’s system failed to accommodate the company’s need for high utilization and efficient production batching, resulting in lower utilization rates and excessive changeovers. PPF attempted to model complex requirements such as bundling products with different labels for various markets; however, multi‑label and language‑cluster–driven variants could not be adequately supported in all cases. As a result, the team continued to rely on traditional, manual Excel‑based processes.

How ketteQ and PPF’s Collaboration Began

After unsuccessful attempts with the legacy system and many months of implementation, PPF decided to engage with ketteQ, a name familiar to Philipp, who has had prior experience with various planning systems. ketteQ proposed a co-development approach, building a tailored solution to address the company’s specific bundling and efficiency needs, integrating directly with the existing demand planning system. The integration required transmitting both master and transactional data to ketteQ’s data solver. This system then evaluates multiple planning scenarios before returning the optimized production plan.

The development and integration process was rapid. ketteQ leveraged its knowledge of planning system models to streamline communication and data mapping. The implementation team in PPF was small, with most members balancing project work alongside daily responsibilities, yet the project progressed quickly due to ketteQ’s agile approach. The co-development model ensured that enhancements would benefit both PPF and future ketteQ clients.

The new solution drastically reduced planning time from hours to minutes but revealed underlying data quality and decision-making challenges within the company. Standardizing and cleaning master data, documenting capacities, and clarifying bundling strategies became critical steps to fully leverage the new system. The first plant that went live with ketteQ saw a 13% increase in capacity utilization, resulting in $8M in projected annual savings through improved production alignment and reduced waste. PPF now uses the optimizer to compare unconstrained and constrained scenarios, enabling more informed decisions about which customer forecasts to prioritize when capacities are limited.

The Future Collaboration Between ketteQ and PPF

Today, the solution is live in two factories, with rollouts planned for additional sites while PPF concurrently implements a new ERP system. I asked Philipp what future collaboration with ketteQ would look like, and he anticipates that in the long term, they will focus on inventory planning once the ERP rollout is complete.

ketteQ’s ability to drive measurable change for companies through its scenario modeling program, without requiring a “rip and replace” of legacy systems, is attractive to potential clients who have experienced lengthy implementations and are seeking a faster option. Supply chain teams are scarred by months- to year-long implementation processes, yet still want to implement changes to address pressing issues. PPF’s and ketteQ’s collaboration is a positive example of being able to address supply chain planning challenges without the massive efforts of implementing an entirely new solution suite.

Partner in Pet Food (PPF) is a leading European pet food manufacturer specializing in high-quality private label and branded solutions. Headquartered in Hungary, the company operates a network of state-of-the-art production facilities that supply nutritious cat and dog food to major retailers across more than 38 countries. They are recognized for their commitment to innovation and quality assurance, ensuring that millions of four-legged critics across the continent receive healthy, balanced meals.

ketteQ is a provider of AI-driven supply chain planning and execution solutions designed for the modern era of volatility. Built natively on the Salesforce platform and powered by its proprietary PolymatiQ solver, the company helps organizations transition from static, legacy planning to an adaptive, real-time approach. By leveraging machine learning and advanced analytics, ketteQ enables businesses to simulate thousands of scenarios, optimize inventory, and improve demand forecasting accuracy. Headquartered in Atlanta, Georgia, the company serves a global clientele, empowering them to build resilient, transparent, and highly efficient supply chains.

The post A Faster Path to Supply Chain Planning: PPF’s Co-Development Story with ketteQ appeared first on Logistics Viewpoints.

Continue Reading

Non classé

Unilever-McCormick Deal Puts Supply Chain Execution at the Center

Published

on

By

Unilever Mccormick Deal Puts Supply Chain Execution At The Center

The proposed combination of Unilever’s food business and McCormick is not just a portfolio move. It is a test of whether greater scale can be converted into stronger sourcing leverage, tighter network design, and more disciplined execution across a broader global food platform.

Why This Deal Matters

The proposed transaction is large enough to draw attention on financial terms alone. But the more important issue is operational. The combination would place McCormick’s flavor, spice, and condiment portfolio alongside Unilever food brands such as Knorr and Hellmann’s in a much larger food platform.

That scale does not create value by itself. In consumer goods, large combinations are often framed around brand fit, category adjacency, and geographic reach. Those factors matter, but the harder question is whether the combined company can translate broader category exposure into a more effective supply chain system.

A Supply Chain Control Play

The most useful way to view the deal is as a control play. McCormick already holds a strong position in flavors, spices, condiments, and pantry-oriented categories. Unilever’s food business adds global reach, broader meal-solution exposure, and deeper international brand presence.

For supply chain leaders, that matters because broader product and channel exposure changes the shape of the operating network. It can improve procurement leverage, expand manufacturing options, and create more flexibility in regional distribution. It can also increase complexity quickly. A company managing spices, sauces, condiments, and meal-oriented packaged foods across multiple regions is managing a more demanding planning environment with different shelf-life profiles, promotional cycles, sourcing exposures, and service expectations.

Where the Synergies Have to Come From

The companies have pointed to roughly $600 million in annual cost savings. That figure is meaningful, but savings at that level do not come from presentation materials. They come from procurement discipline, footprint decisions, SKU rationalization, production alignment, and transportation execution.

The first opportunity is upstream. A larger ingredient and packaging spend can improve negotiating leverage and provide a better buffer against commodity volatility. But that leverage only becomes real if the combined company can standardize specifications where appropriate, reduce overlap, and rationalize supplier relationships without weakening resilience or product quality.

The second opportunity sits inside manufacturing and planning. A broader portfolio creates more options for plant specialization, co-manufacturing strategy, inventory positioning, and regional production assignment. It also raises the cost of weak coordination. When portfolios expand, planning errors propagate across more categories, channels, and geographies. Integration, in that context, is not an administrative exercise. It is the work that determines whether synergy targets are credible.

Network Design Will Determine the Outcome

The combined company would inherit a larger and more globally distributed operating footprint. That should create opportunities to redesign network flows, reduce duplication, and make more deliberate choices about where production should sit relative to demand, sourcing risk, and transportation cost.

But larger networks are not automatically better networks. They are often harder to simplify and slower to coordinate. The operating challenge is to determine which parts of the network should be consolidated, which should remain regionally differentiated, and where service levels matter more than efficiency. A food platform of this size must manage cost and throughput, but also freshness, shelf stability, retailer expectations, foodservice dynamics, and regional taste differences. Those constraints narrow the margin for error.

Channel Power Still Depends on Execution

There is also a channel implication. McCormick has long held strength in flavor-centric categories with broad household penetration. Unilever’s food business adds deeper scale in everyday meal and condiment categories across retail and food channels.

That matters because channel strength increasingly depends on execution reliability rather than simple shelf presence. Suppliers that maintain fill rates, support promotions without destabilizing inventory, and preserve working capital discipline hold a stronger position with retailers and distribution partners. In that sense, this deal is as much about operating consistency as it is about category expansion.

Regulatory and Integration Risk Remain Real

The market’s initial response suggests that investors understand the opportunity but do not yet fully trust the path. Concerns have focused on valuation, deal structure, closing timeline, and likely antitrust scrutiny. Those are not side issues. They connect directly to execution.

A prolonged closing period can delay decisions on footprint, sourcing, systems integration, and organization design. Regulatory uncertainty can slow consolidation actions. Labor concerns can complicate plant and workforce decisions. This is also a structurally complex transaction rather than a simple cash acquisition, which raises the execution bar further.

What Supply Chain Leaders Should Watch

For supply chain executives, the most useful lens is not whether the transaction sounds strategically sensible. It is where management places operational emphasis as integration planning advances. The key signals will be supplier consolidation strategy, manufacturing footprint decisions, network redesign, service-level performance, and the discipline applied to portfolio simplification.

This is also a broader industry signal. In mature food categories, scale is less about revenue aggregation than about who can run a more coordinated system. Companies that combine sourcing power, better planning, tighter execution, and consistent channel service will protect margins more effectively than those that simply add volume.

The strategic rationale behind the Unilever-McCormick transaction is understandable. The operating burden is the real story. If the combined company improves control across sourcing, manufacturing, and distribution, the deal will look disciplined. If not, skepticism around the transaction will remain justified.

The post Unilever-McCormick Deal Puts Supply Chain Execution at the Center appeared first on Logistics Viewpoints.

Continue Reading

Trending