New York – When it comes to supply chain security, most retailers are diligent about things like locking up warehouses and vehicles. But when it comes to securing technology used to manage supply chain operations, retailer diligence often trails off.
“There is a problem with IT systems lacking point security in the supply chain world,” said Jeffrey Luft, global practice leader for transportation and distribution at Verizon Enterprise Solutions. “Retailers don’t lock down their point data, leading to data hacking and supply chain disruption.”
As opposed to the theft of credit card data, where stolen consumer information is usually resold and used almost immediately, Luft said stolen supply chain data may not deliver value to criminals for an extended period of time.
“There may be value in knowing what route a truck will take or when a particular ship will dock at what port in what country,” Luft explained. “Or knowing what inventory is located in what distribution center. And nobody is the wiser hackers have been in the system. Then a few months down the road, a truck carrying a valuable jewelry shipment is hijacked.”
In addition to outside hackers, internal employees may also misuse access to supply chain data to help pull off “inside jobs” that can cost retailers large amounts of money. Luft said retailers must carefully monitor and restrict employee access to supply chain systems and data.
“Everyone might have access to a database, but not everyone needs access to specific inventory numbers or where outbound shipments are going.”
Luft recommends that retailers regularly hire outside security consultants to perform analysis of supply chain technology security and probe for weaknesses that a criminal might exploit.
“Data is the oil of the 21st century,” said Luft. “In addition to testing rapid detection of and response to supply chain security breaches should be part of all retailers’ business continuity plans. Plan for alternate sources of goods if there is a supply chain disruption.”