Cyber Supply Chain Risk Management

Recent cyber-attack incidents along with the dramatic increase of the number and geographic diversity of software and hardware suppliers have exacerbated the complexity of the already difficult challenges of supply chain risk management and mission planning. Mission planning commanders and supply chain managers alike are increasingly dependent on the availability and reliability of individual weapons and devices to succeed in their mission objectives. The aim of this SBIR effort is, therefore, to provide an innovative decision support framework that will reduce risks and boost the likelihood of mission success in the context of the Information and Communication Technology of a supply chain. The DECISIVE ANALYTICS team will accomplish this goal through integration of innovative techniques for product integrity analysis, state-of-the-art mathematical models for comprehensive supply chain risk analysis, and interactive multi-layer visualization tools that will guide a human operator. Our approach will provide the following capabilities: 1) Specification of risk factors based on an innovative product integrity analysis, 2) Mechanism for selection of low-risk components in the acquisition and mission planning process, 3) Mechanism for identification and analysis of the critical products and functionalities, and 4) Visualization tools for easy review of the results of the supply chain risk analysis.