Meaning
The unauthorized transmission of confidential technical data or commercial secrets by vendors who are not direct contractors but are further down the supply chain. This sub tier supplier leakage often occurs when a primary manufacturer shares sensitive designs and intellectual property with a direct supplier who then passes them to a smaller subcontractor without adequate security controls. The risk is highest in industries with complex assemblies and a high degree of outsourcing.
IP Exposure
Proprietary drawings and software code are frequently copied and used to create counterfeit products or to assist competitors. Because the original manufacturer has no direct contract with the sub-tier entity, it is difficult to enforce non-disclosure agreements or audit their security practices. This lack of visibility makes the lower levels of the chain the weakest link in intellectual property protection.
Security Protocol
Manufacturers must require their primary suppliers to conduct regular audits of their own vendors and to use encrypted communication channels for all data transfers. Implementing a multi-layered security strategy includes the use of watermarks on digital files and the restriction of access to sensitive information on a need-to-know basis. These steps help to track the flow of information and identify the source if a breach is discovered.
Supply Chain
Mapping the entire network of suppliers allows a company to identify which vendors pose the greatest risk to their confidential data.