Open Group Forms 'Trusted Technology Forum' for Supply Chain Security

12/17/2010

The Open Group announced the formation of The Open Group Trusted Technology Forum (TTF), a global standards initiative that will provide a collaborative, open environment for technology companies, customers, government and supplier organizations to create and promote guidelines for manufacturing, sourcing, and integrating trusted, secure technologies. The forum’s objective is to shape global procurement strategies and best practices to help reduce threats and vulnerabilities in the global supply chain.

The TTF is a proactive response to the changing cybersecurity threat landscape and will address the mitigation of risks potentially introduced by vulnerable supply and development processes. Founding members are Boeing, Carnegie Mellon SEI, CA Technologies, Cisco, HP, IBM, Kingdee, Microsoft, MITRE, NASA, Oracle, and U.S. Department of Defense (OUSD(AT&L)/DDR&E); the forum will operate under the stewardship of The Open Group, an international vendor- and technology-neutral standards consortium.

Initially, the TTF will release a framework that for the first time unifies in a systematic way the industry best practices that contribute to the secure and trusted development, manufacture, delivery and ongoing operation of commercial software and hardware products. The TTF’s long-term objective is to develop a globally-recognized program based on open, international standards. Such a program will identify trusted technology providers and products throughout the global supply chain, enabling suppliers to innovate and build technology products with integrity and customers to buy with confidence. Governments and enterprises that use these global standards in their technology strategy and purchasing decisions can rely on a more comprehensive approach to risk management and product assurance when selecting commercial off-the-shelf technology products. Vendors and suppliers that adhere to these practices will be able to better protect the integrity of their products and services as they move through the global supply chain.

The Open Group will provide guidance and a vendor-neutral collaborative environment for TTF members to identify industry best practices and define a globally recognized program for providers who implement the best practices.

The TTF’s work program will aim to:

• Identify and promote the use of supply-chain best practices to reduce security risks that may be intentionally or inadvertently introduced into the global supply chain * Identify manufacturing practices for protecting product lifecycle and checkpoints throughout the lifecycle that mitigate risk from uncontrolled, unprotected development methods and engineering procedures * Develop criteria for identifying trusted technology providers * Work with the global community to develop responsible and realistic procurement strategies for mitigating supply chain risk

The Open Group Trusted Technology Provider Framework (TTPF) has been in development over the past year as a project of the Acquisition Cybersecurity Initiative, a collaborative effort between government and industry verticals under the sponsorship of the U.S. Department of Defense (OUSD (AT&L)/DDR&E); and facilitated by the Open Group. The framework is intended to benefit technology buyers across all industries concerned with secure development practices and supply chain management, including government and defense, transportation, healthcare, and financial services. The first deliverable of the TTF will be the TTPF White Paper that will outline current industry best practices for manufacturing trusted technology products and will build on the highest priority areas such as supply chain integrity where action is most likely to mitigate risk with a global recognition program that identifies providers who are following the best practices.

For more information on The Open Group Trusted Technology Forum, please visit: http://www.opengroup.org/ogttf/.

Home
Webinars
Blogs
ebizQ Forum
All Topics
Subscriptions
White Papers
Analyst Corner
Follow us on Twitter
Fan us on Facebook

Explore Our Topics

BPM Strategy
BPM Solutions
Event Processing Strategy
Content-Centric & Collaborative BPM
Process-Centric BPM

About Us
Editorial Submissions
Feedback
FAQ
Advertise With Us
Site Map
Privacy Policy
Unsubscribe