community advocacy function gifas presentation

Community Advocacy FunctionGIFAS Presentation

TSCP presentation to the GIFAS

9th May 2007

Prepared by Marc Speltens,

TSCP Outreach director

CAF - EU Outreach | 09.5.2007 | 2 | GIFAS May Paris

Agenda

Rationale for TSCP TSCP Description CertiPath’s role Current TSCP membership TSCP Membership and participation Discussion and Q&A


Rationale for TSCP

To do business in the world today, A&D companies must balance the need to protect intellectual property (IP) while demonstrating willingness and ability to meet contractual requirements from government customers for auditable, identity-based, secure flows of information.

This duality requires that security be both within organizations and across extended supply chains and partners


TSCP description

TSCP was created by industry with US and UK government support to provide a framework for secure collaboration and the international sharing of sensitive information in major defence acquisition programs.

The main purpose is to mitigate risks associated with national security, export controls, intellectual property and privacy data.

Initially focused on, and delivered, guidance material that is supported by US and UK governments.

Members decided to build on this and implement solutions to enable secure collaboration to work.

Transglobal Secure Collaboration Program


TSCP description

TSCP is the only government-industry partnership specifically focused on facilitating solutions to the most critical issues in A&D today:

Mitigating the risks related to compliance, complexity, cost and IT that are inherent in large-scale, collaborative programs that span national jurisdictions.

Secure information sharing for those who work to secure the world


TSCP description

TSCP’s charter provides a framework for secure collaboration and sharing of sensitive information in international defence.

TSCP delivers solutions that support the shared vision of the partners for a new A&D trading platform – where community-standard, enterprise-wide specifications and reference-able implementations make secure information sharing a reality

A collaborative forum


TSCP description

The TSCP standards are not just for handling information to government customers. It is for establishing a cost effective secure collaboration framework for the entire industry.

Impact on everyone within: Procurement (Export Control - EC), Product development (Intellectual Property protection - IPP), Engineering (IPP), Sales and after sales (EC and commercial advantage protection), Customer management (EC and IPP), Maintenance (EC).

A framework for the entire A&D industry


CertiPath’s role

TSCP is managed by CertiPath, a private-sector entity institutionalized within the TSCP framework

CertiPath provide both governance and development services: Design Authority, development and prototyping Program management and other contracted services Advocacy, advice, influence and socialization, working with

Governments and trade associations, non-aligned to any organization


CertiPath’s overview

Boeing EADS

Lockheed

Martin

BAE

Northrop

CertiPath

DoDNAS

ADoT DHS

US Federal Bridge CA

CA Providers:- ARINC- Exostar- SITA

Companies which do not want to operate

their own CA’sOther industry Bridges

(automotive, transportation/cargo, banking, etc.)

UK MoD

(in process)

Othergovernments

TBD


Current TSCP membership

Major industry suppliers/OEMs

Government and administrations


TSCP Member main benefits

Demonstrate compliance with export control regulations Meet governments’ emerging requirements for identity

assurance Protect corporate IP in collaborative and other

information sharing programs Protect personal privacy data of employees Have collaborative toolsets that will interoperate with

customers and suppliers

Reduce risk and increase control


TSCP Membership and participation

Immediate ability to demonstrate trustworthiness to governments, project partner companies and supply chains based on a common language, processes and protocols.

Playing an active role in defining the operating rules and mechanisms for federated trust environments

Opportunity to build on the collective expertise in a broad range of policy and regulatory questions, influence specifications



Large critical mass in the TSCP of prime contractors, Advantages adopting the TSCP standards early, as there

will be competitive advantage to being first supplier ready to work with these new standards.

Taking a position on the TSCP is probably more cost effective than any other possible approach, as the TSCP is collectively discussing secure collaboration with

the correct government players, and The TSCP is helping to influence many of the choices that

various governments are making in their directions for collaboration with industry.

Consistent voice to customers, suppliers and governments



Individually, most of the companies at the TSCP table already have a fairly large place in the revenue projections of companies like Microsoft and IBM.

If these vendors hear exactly the same tune coming from all of the TSCP participants, that becomes an almost deafening voice to have changes put through quickly.

We are actively working with several vendors to improve the capability of their products to support secure collaboration

Louder voice to vendors



A company joining TSCP has a voice at the table, and is able to participate in the collective accumulation of knowledge of how to collaborate securely

A TSCP member also has the ability to influence how a given technology is implemented, and to push for a solution that will be more easily adopted by their organization.

Huge cost savings through adoption of a common collaboration framework, as this: simplifies audit for compliance and government regulation, reduces costs due to common infrastructure, and reduces time to market, as a custom infrastructure does not need to

be established for each new product, program or project

Influence now, rather than be a victim later



Commercial organizations gain a seat at the table with customers and prospects where the rules of the working relationship are defined

Defence agencies gain considerable ability to ensure data security as information passes from their network to the supply chain

TSCP offers a two-tiered membership to meet the needs of organizations seeking to gain a distinct advantage by ensuring that the mechanisms used with customers and partners tomorrow take into account nuances of their policies and infrastructure.


TSCP – Platinum member

Government defence agencies and their prime contractors are eligible for TSCP Platinum membership.

Participation at this level entitles the organization to all the rights and privileges TSCP offers, including

A TSCP Governance Board (GB) seat with full voting rights

May bring forth new problem area descriptions for consideration as they like and for those accepted they will fully participate in their life cycle.

Full representation and participation in the Enterprise Architects Group and the Program Management Group


TSCP – Gold member

The Gold level is new for 2007 and caters to organizations looking to get the majority of benefit at a 50 percent reduction in cost.

Gold Members in the TSCP are entitled to: Participate in the requirements definition process and can

bring forth a TCC Be one of the three required members for a TCC’s

ratification Play an active role in the Enterprise Architects Group and

the Program Management Group


TSCP – Partner member

Partners have the opportunity to participate in the creation of specifications and in the reference implementation to prove technical feasibility.

While this IP will be released to the public domain when complete, partners benefit from early access to specifications and requirements


TSCP – Partner member benefits

A captive customer base that defines its own product needs, builds reference implementations and then turns the requirements over to partners for creating general availability solutions

Increased goodwill with customers through work on specifications and reference implementations

Participation in TSCP’s Enterprise Architecture Group (EAG) with government organizations and prime contractors.

Accreditation against published specifications and inclusion in product catalog through CertiPath for products aligned to TSCP member needs


Discussion and Q&As


Contact details

TSCP – Outreach Director: Marc Speltens [email protected] Office: +32 2 745 05 62

SITA/CertiPath: John Pawlicki [email protected] Office: +1 310 782 7357

TSCP – Outreach Director: Jeff Nigriny [email protected] Office: +1 703 793 7740


Web sites

www.certipath.com www.tscp.org

community advocacy function gifas presentation

Documents

secure information

qacaf eu outreach

secure flows of information

partners caf eu outreach

world caf eu outreach

handling information

tscp frameworkcertipath

entire industry