Information security in supply chains — A process framework

The key motivator behind information security is the management of business risk and regardless of whether that risk is financial or not, organizations mitigate vulnerabilities in the enterprise to reduce the threat to both reputation and customers. This paper discusses some aspects related to information security in supply chains and then proposes a Process Framework for the management of information security in the supply chain. The Framework should help supply chain managers collaborate with information security and IT specialists to establish, implement and operate their Supply Chain Information Security Management System.