NSA, Trusted Computing Group and Intel collaborate to standardise supply chain risk management

By Dale Benton
The National Security Agency (NSA) has unveiled new software that is designed to “set the standard” in Supply Chain Risk Management. NSA Research...

The National Security Agency (NSA) has unveiled new software that is designed to “set the standard” in Supply Chain Risk Management.

NSA Research, together with the Trusted Computing Group (TCG), a consortium of industry partners has been working for two years alongside Intel to release software that will standardise a supply chain validation process that can be used on any computing device.


During the manufacturing process, TCG-defined certificates are created to capture attributes about the device. The certificates are then delivered with the device in the Trust Platform Modul (TPM), a secure information storage system that captures data throughout the process.  NSA says that this information will come from multi-vendor devises and multi-stage production.

The information stored within the TPM is then broken down and assessed by NSA’s Host Integrity at Runtime and Startup (HIRS) software to validate the source of components in order to highlight and alleviate supply chain risks.

“The development of open source tools for Trusted Computing-based supply chain validation provides the U.S. Government with greater confidence in the security of our mission critical systems,” said Peg Mitchell, NSA Chief Information Security Officer. “The cryptographically verifiable certificates that bind devices and peripherals to their trusted platform manufacturer will help reduce supply chain threats. This technology will bolster the security posture for NSA, the Department of Defense, and for commercial entities that require high confidence in the integrity of their systems.”

NSA will be showcasing its new software at RSA 2019 in San Francisco from March 4th to the 8th.


Featured Articles

IBM CSCO & COO survey shows tech & sustainability key areas

IMB Institute for Business Value (IBV) study surveyed 1,500 CSCOs and COOs, and they are ramping-up investment in automation, AI and sustainability

Suppeco and Market Dojo partner on e-sourcing solution

Supplier relationships platform Suppeco & digitised procurement solution Market Dojo join forces to provide embedded on-demand e-sourcing service

Pitney Bowes Index shows China breaks 100bn parcels barrier

Latest Pitney Bowes Parcel Shipping Index Global shows parcel volume hit 159bn in 2021, or 5,000 parcels per second, with total carrier revenue of $491.5bn

CPG packaging supply problems sees Lidl buy paper mill

Supply Chain Risk Management

CPG & retail IT talent quest 'is driving tech investment'

Digital Supply Chain

Value chain, tech, logistics and procurement news round-up