Working to Secure the World: How Global Defense & Aerospace Competitors Collaborate

1. Philippe Laflandre (EADS), TSCP vice-chair Working to Secure the World: How Global Defense & Aerospace Competitors Collaborate Global Forum - 8 th November 2010

2. Transglobal Secure Collaboration Program (TSCP) Transglobal Secure Collaboration Program (TSCP) • Government-industry partnership specifically focused on mitigating the risks related to compliance, complexity, cost and IT that are inherent in large-scale, collaborative programs that span national jurisdictions. • To do business in the world today, A&D companies must balance the need to protect intellectual property (IP) while demonstrating willingness and ability to meet contractual requirements from government customers for auditable, identity-based, secure flows of information. • Common Framework for Federated Collaboration • Identity Management & Assurance: • Provide assurance that collaborative partners can be trusted • Meet government agencies’ emerging requirements for identity assurance across domains • Establish common credentialing standards that accommodate and span national jurisdictions • Protect personal privacy data of employees • Data Protection: • Define fine grain access right attributes for data labeling and data right’s management • Establish “Application Awareness” • Demonstrate compliance with export control regulations • Protect corporate IP in collaborative and other information sharing programs • Facilitate Secure Collaboration: • Provide collaborative toolsets that will interoperate with customers and suppliers • Facilitate re-use collaborative capabilities among multiple programs

3. Aerospace & Defense (A&D) Industry Challenges Increased focus on managing.. ….the Regulations …the Risks ….the Threats Need Industry Approach Architectures & Standards Focused On Collaboration • Solutions can’t be done • independently by every enterprise • Requires a cooperative • ‘team’ approach to avoid • unique solutions that will • drive cost • Need acceptance by Government Agencies • Eg. State Dept., DoD, Commerce, etc. Identification  Authentication Authorization Information Application Operating System Network Physical Information Rights Bridge CAs Directory Services Single Sign-On AZN Services Access Provisioning Manufacturing Subcontractors Manufacturing & Design Subcontractor Distributed Engineering & Manufacturing Teams & Supply Chain National/International Extended Enterprise Lead Contractor Customer Solution – work cooperatively towards… 3

4. TSCP Strategic Goals Enable secure information sharing within and between industry and governments. Enable collaboration compliant with export control and relevant policies and company Intellectual Property protection policies. Define a set of interoperable specifications and solutions that enables re-use in a cost effective manner across multiple programs. Make TSCP specifications and solutions a standard in the A&D community.

5. DOD – TSCP External Standards Body “The Transglobal Secure Collaboration Program (TSCP) is a government-industry partnership specifically focused on facilitating solutions to the most critical issues in Aerospace and Defense (A&D) today: A key enabler for the TSCP is a common identity approach that is highly aligned with the HSPD-12/PIV credentialing program. Their interoperable identity credentials mitigate the risks related to compliance, complexity, cost and IT that are inherent in large-scale, collaborative programs that span national jurisdictions. To do business in the world today, A&D companies must balance the need to protect intellectual property (IP) while demonstrating willingness and ability to meet contractual requirements from government customers for auditable, identity-based, secure flows of information. This duality requires that security be both within organizations and across extended supply chains and partners.”

6. Foundation Components Identity Framework Identity Attributes Information Attributes – aka labels Legal Framework to enact trust All must be open & interoperable

7. CertiPath FAA US FBPKI NASA DHS State Dept. .... SAFE (Pharma Bridge)

8. Questions? 8CONFIDENTIAL