Lean Digital Thread: The Secure Digital Thread

Securing intellectual property has become a priority for manufacturers, and recent reports from the U.S. and EU governments highlight the risks and direction for securing the supply chain. In February, the U.S. Department of Homeland Security published an assessment of supply chains supporting electronics manufacturing1. Following closely in March, Europol released the 2022 Intellectual Property Crime Threat Assessment report2, bringing attention to the risks counterfeit electronic components pose to supply chains. Then in April, the direction for the U.S. Department of Defense Cybersecurity Maturity Model (CMMC) program became clearer as NIST released a draft of Special Publication 800-823, which serves as the framework for securing operational technology within the defense contractor network. Let’s look at some of these recent publications and how they affect manufacturers.

Intellectual Property Security
The CMMC program is an initiative to improve information security within the U.S. defense contractor network. The program has been ongoing for a few years, but last November, the Department of Defense announced plans to clarify and enhance the program in an update dubbed CMMC 2.0. The goal of the update is to make CMMC a program that can be implemented by the entire defense industrial base, including smaller subcontractors that may not have expertise in cybersecurity.

Three key components of the CMMC program are:

  • Contracts with the U.S. Department of Defense that include clauses requiring security for controlled unclassified information (CUI)
  • Security frameworks and guidelines built on NIST standards and publications
  • Third-party auditing of the CMMC controls implemented at manufacturers

Securing information is not necessarily a new topic for most manufacturers. Security controls around information technology (IT) processes are generally in place for most publicly traded companies to adhere to financial regulations, and ongoing concerns about malware and hacks lead most organizations to keep their network secure from external threats. Even smaller companies can leverage outsourced IT contractors and cloud-based systems to have a well-managed, secure infrastructure. Of course, exploits occur, companies get hacked, and intellectual property is stolen, but not because we do not know how to secure IT systems. It is usually the case that some generally accepted control was not implemented, or social engineering was used to exploit the organization.

What may be a new challenge for manufacturers is the requirement in CMMC 2.0 to secure the operational technology (OT)—the machines and processes building the products. Typically, these machines are on segregated “unmanaged” networks that fly under the radar of traditional IT security. But with CMMC 2.0, manufacturers will need to implement similar security controls in this relatively uncontrolled environment. If this has you wondering how you will implement multi-factor authentication on the Windows 95 computer running that ancient, but critical, piece of equipment in your factory, do not fret too much; the CMMC requirements take these scenarios into account. For instance, physical security is considered one security factor, so as long as there is an acceptable control on who has physical access to the equipment, then multi-factor authentication is covered with a simple PIN or password control on the equipment.

The NIST Special Publication 800-82 Rev. 3 Draft released in April provides a framework for implementing the security controls in operational technology. It provides guidance on the typical OT system layouts, identifies common vulnerabilities, and recommends methods to mitigate system risks.

Supply Chain Security
While the electronics manufacturing industry continues to recover from the capacitor shortages of a couple of years ago, the supply of silicon is still constrained. The industry is planning new foundries to alleviate the lack in supply of IC components, but many manufacturers are stockpiling components to weather the current deficits, often turning to less-qualified, second-source vendors. Until IC supply catches up with increased demand, manufacturers face an increased risk of counterfeit, recycled, or otherwise inauthentic components.

With supply chain issues forcing manufacturers to use second- or third-tier suppliers for components, there is an additional risk of inauthentic materials being assembled on the line. These could be aged components, mixed lots, counterfeit, recycled, or even tampered components. Current methods of mitigating these risks rely on destructive samples of components or partial inspection of the top of the component. These methods leave open gaps where bad components can enter the supply, be assembled into products, and then shipped out to the field. Is there an efficient way to inspect 100% of components to prevent the use of bad components?

There are several points in the typical PCB assembly process where images are taken of the product and the components. The SMT machine takes a picture of the bottom of every component to use when aligning the component properly before placement. The AOI process takes a very detailed image of the board and the top of components after assembly. All these images can be used by AI to identify the source of the component and flag any components that are damaged (cracked, recycled, tampered).

Especially in the SMT process, the decision to assemble or waste the component can be made during the assembly cycle to prevent assembling any bad components. As an extra benefit, the traceability for the board is based on actual evidence of the component on the board and does not rely on operators labeling and scanning materials properly.

With this capability, each and every component placed on the board is inspected without any additional labor or loss of efficiency on the line.

Next Steps
To learn more about how manufacturers are adapting to the requirement of CMMC, check out the upcoming July 2022 issue of SMT007 Magazine.

References

  1. Assessment of the Critical Supply Chains Supporting the U.S. Information and Communications Technology Industry, U.S. Department of Commerce and U.S. Department of Homeland Security, Feb. 23, 2022.
  2. Intellectual Property Crime Threat Assessment 2022, European Union Intellectual Property Office.
  3. SP 800-82 Rev. 3 Guide to Operational (OT) Security, Computer Security Resource Center, NIST.

Zac Elliott is technical marketing engineer for Siemens Digital Industries Software. Additional content from Siemens Digital Industries Software:

Back

2022

Lean Digital Thread: The Secure Digital Thread

06-29-2022

Securing intellectual property has become a priority for manufacturers, and recent reports from the U.S. and EU governments highlight the risks and direction for securing the supply chain. For example, in February, the U.S. Department of Homeland Security published an assessment of supply chains supporting electronics manufacturing. Following closely in March, Europol released the 2022 Intellectual Property Crime Threat Assessment report, bringing attention to the risks counterfeit electronic components pose to supply chains. Let’s look at some of these recent publications and how they affect manufacturers.

View Story

Lean Digital Thread: The Manufacturing Metaverse

05-11-2022

If you follow technology news, you’re aware of the buzz about the metaverse. Even if you do not follow technology news, you have likely heard that Facebook has rebranded itself as “Meta” to align with its focus on the metaverse. You may be wondering what the metaverse is all about and how it applies to manufacturing. Zac Elliott of Siemens shares his perspective.

View Story

Lean Digital Thread: Closing the Loop on Manufacturing

04-12-2022

Throughout this series of articles, we have looked at the benefits of implementing a digital thread for electronics manufacturing. In this edition, I would like to close the loop (pun very much intended) on the lean digital thread and discuss closed-loop manufacturing. In closed-loop manufacturing (CLM) the systems and business processes used to design, plan, manufacture, and use a product are connected, thus enabling continuous improvement and self-organization of production processes.

View Story

Lean Digital Thread: Keeping an Eye on Quality

03-08-2022

So far in this series of articles, we have looked at current trends in the supply chain and the challenges facing manufacturers. In general, the takeaway has been that we must do more with less: We need to be more flexible while simultaneously decreasing labor input, and we need to be more efficient while also managing component shortages.

View Story

Lean Digital Thread: Streamlining the Internal Supply Chain

02-16-2022

In response to labor shortages exacerbated by the global pandemic, many manufacturers are leveraging digitalization and automation to reduce labor needs and improve productivity in the factory. This is not exactly a new trend, as many manufacturers have used Enterprise Resource Planning (ERP) systems and automated production lines to drive their manufacturing operations for many years. However, as new processes are automated and existing automated lines are connected to the full factory, there are many pitfalls to avoid and challenges to overcome.

View Story

Lean Digital Thread: Achieving Supply Chain Resilience

01-19-2022

The shortage of semiconductor components emerged during a hypergrowth of demand for semiconductor chips. To emphasize the magnitude of the hypergrowth, the global semiconductor market is projected to grow from $452.2 billion in 2021 to $803.1 billion in 2028—almost 78% in just seven years, or an average of 8.5% annually. The combination of this growth in demand and the shortage of semiconductor chips poses a great challenge for the entire electronics industry and for manufacturers, particularly.

View Story
Back

2021

Lean Digital Thread: (Pro)curing the Supply Chain Virus

12-15-2021

Turn on the news and you’re likely to see images of something that was never considered newsworthy in the past—shipping containers. In fact, the entire supply chain has suddenly become big news due to the ongoing, severe global backlog that is preventing consumers from getting the goods they need on a timely basis. It’s a true global crisis. Since the supply chain crisis coincided with, and was hugely exacerbated by, the COVID-19 pandemic, many expect that it will be resolved when the pandemic recedes. However, that is not necessarily the case. Some major changes, such as increased demand (especially for electronics) and labor shortages, are likely to continue for many years into the future, becoming the new post-pandemic normal.

View Story

Lean Digital Thread: Why is Everyone Suddenly Interested in Supply Chain?

11-11-2021

Prior to the global pandemic, most people didn’t give the supply chain much thought. There was no reason to—consumers had become accustomed to simply clicking on an item on a website, and it would magically arrive on their doorstep the next day. What difference did it make how it got there and where its components were produced as long as everything was running smoothly? That reality has changed drastically in the past year and a half since the onset of the pandemic. Suddenly, it seems like there is a backlog of several months on every item, from cars to washing machines to books; the supply chain has become the headline news in leading publications.

View Story

Lean Digital Thread: AI Wields Powerful Weapon in Counterfeit Components

04-13-2021

The world is still very much in the middle of a pandemic that has been altering the global economy in multiple ways. For starters, millions of employees suddenly found themselves needing to have the technical resources to work from home, their children had to start attending elementary school via Zoom, and, as a result, the demand for technology has seen a recent spike to unprecedented levels.

View Story

Lean Digital Thread: Achieving Operational Excellence Is a ‘Must Have’

01-25-2021

Are current manufacturing processes no longer suitable for electronics? Newer consumer-buying patterns are pressuring factories to rely on technology to become more dynamic and agile. The latest technologies can be successful in streamlining certain processes, but the whole business process, entrenched in bad habits, merits real change. Here are five of the best positions for change.

View Story
Back

2020

Lean Digital Thread: Micro-Solutions—Solving One Challenge at a Time

11-24-2020

As promised, Sagi Reuven jumps back to the manufacturing floor and shares his thoughts on the role of a manufacturing execution system (MES), reporting, and analytics. Reuven describes in more detail the micro-solutions concept and why he thinks it will make a huge impact on achieving productivity excellence.

View Story

Lean Digital Thread: Accelerating Global New Product Introduction

10-21-2020

James Dyson once said, “Manufacturing is more than just putting parts together. It’s coming up with ideas, testing principles, and perfecting the engineering, as well as the final assembly.” In this column, Sagi Reuven describes the importance of process engineering or new product introduction (NPI) and how process engineers can make a big difference.

View Story

Lean Digital Thread: DFM Is Now as Easy as Spellcheck

09-30-2020

In past columns, Sagi Reuven has written about topics mostly related to the shop floor. In this column, he talks about design for manufacturing (DFM). It is clear to everyone in the Industry 4.0 era that the holy grail is to close the loop between design and manufacturing.

View Story

Lean Digital Thread: Data-Driven Decisions and Micro-Solutions in Manufacturing

08-26-2020

In past columns, Sagi Reuven has written about two pillars: (1) data collection and the basic questions you can answer, and (2) material management and its impact. In this column, he discusses the next level—changing the mindset from reporting to analytics and focusing on making small improvements.

View Story

Lean Digital Thread: Driving Productivity Excellence—Lean PCB Manufacturing

07-22-2020

During the last few months, thanks to COVID-19, Sagi Reuven felt the supply chain impact on our hardware production for the first time and hence dedicates this column to effective material management.

View Story

Lean Digital Thread: Realizing ROI Starts With Making Smart Data

06-16-2020

Sometimes, you think too much about the bits and bytes, and you forget why you started this journey; we’re all caught up in a tornado of marketing buzzwords. In Sagi Reuven's debut column, he shares how initialization has to start by turning data into smart data.

View Story
Copyright © 2022 I-Connect007. All rights reserved.