Value Chain Stages

Value Chain Threats Lead toValue Chain Exposures

Counterfeit IP Misuse/Information

Security Breach

Taint

average security incidents

(where attributable) linked to 3rd parties

2010 – 2019 Verizon Data Breach Investigation Reports

enterprises using 3rd party security providers

2018 Cisco Annual Cybersecurity Report

CISOs prefer vendors who implement value

chain securityCisco CISO Benchmark Report 2020

73%79%

Use 1–20

21%Use > 20

85%

www.cisco.com/go/valuechainsecurity© 2019 Cisco and/or its affiliates. All rights reserved.

What Is a Value Chain?The end-to-end life cycle for hardware, software or services that delivers value

What Is the Cisco Value Chain?The 3rd party ecosystem that supports the life cycle of Cisco solutions

Cisco Value Chain security encompasses the 3rd party ecosystem

Espionage Manipulation Disruption

Design Plan Source Make Quality Deliver Sustain End of Life

!

• Secure development life cycle• Scrap weight validation• Role-based access

• Encryption• Smart chips• Data-extracting test beds

• Camera monitoring• Security checkpoints• Electronic or biometric

access control

LogicalSecurity

SecurityTechnologies

Physical SecurityPractices

The right security in the right place at the right time

PLAN• In-house

END OF LIFE• Scrap partners

• Recycling partners

MAKE• OEMs• ODMs

• 3rd party software licensors• Open Source software

• Cloud service providers

DELIVER• Logistics partners• Channel partners

• Distributors• Services Logistics partners

• Refurbishment partners

QUALITY• All 3rd party participants

SOURCE• Manufacturing partners

• ODMs• Repair partners

• Refurbishment partners• Cloud service providers

SUSTAIN• Technical support partners• Repair services partners

• Depot partners• Cloud service providers

Cisco Value Chain Security encompasses

our entire 3rd party ecosystem.

DESIGN• Logistics partners• Channel partners

• Distributors• Services logistics partners

• Refurbishment partners

1

5

2

37

8

46