Page 8 - cdm-2014

Taking real life incidents and sharing the lessons learned will raise the bar of education and
awareness. If that also includes analysis to determine what protective measures, had they been
in place, would have prevented or reduced the impact of the event, then that stakeholder
community will be able to make better informed risk management decisions.

Finally, the government procurement process should recognize and consider companies and
organizations that implement widely accepted product integrity and supply chain assurance
programs and have those programs certified and accredited by recognized standards bodies.

Refreshing to note, there are efforts currently underway in government to take important steps
in the direction articulated above. These are only initial steps and more needs to be done to
achieve true risk reduction.

Supply chain assurance and product integrity, particularly in the ICT industry, has become a
national and economic security issue. It is top of mind for many in the national defense
community and has been an ongoing priority for Juniper Networks. Like most security issues,
supply chain risk management is a shared responsibility between government and industry and
requires continued collaboration to reduce risk and improve the security and resilience of our
nation’s critical infrastructure.

About the author:

Bob Dix is the Vice President of Government Affairs and Critical
Infrastructure Protection for Juniper Networks. Dix has enjoyed a
distinguished career in both the public and private sector, and is widely
recognized across industry and government as a subject matter expert
and a leading policy expert in furthering government/industry partnerships
to protect U.S. critical infrastructure.

! " $ !
! # ! "