Community Advocacy Function GIFAS Presentation

1. Community Advocacy FunctionGIFAS Presentation TSCP presentation to the GIFAS 9th May 2007 • Prepared by • Marc Speltens, • TSCP Outreach director

2. Agenda • Rationale for TSCP • TSCP Description • CertiPath’s role • Current TSCP membership • TSCP Membership and participation • Discussion and Q&A

3. Rationale for TSCP • To do business in the world today, A&D companies must balance the need to protect intellectual property (IP) while demonstrating willingness and ability to meetcontractual requirements from government customers for auditable, identity-based, secure flows of information. • This duality requires that security be both within organizations and across extended supply chains and partners

4. TSCP description • TSCP was created by industry with US and UK government support to provide a framework for secure collaboration and the international sharing of sensitive information in major defence acquisition programs. • The main purpose is to mitigate risks associated with national security, export controls, intellectual property and privacy data. • Initially focused on, and delivered, guidance material that is supported by US and UK governments. • Members decided to build on this and implement solutions to enable secure collaboration to work. Transglobal Secure Collaboration Program

5. TSCP description • TSCP is the only government-industry partnership specifically focused on facilitating solutions to the most critical issues in A&D today: • Mitigating the risks related to compliance, complexity, cost and IT that are inherent in large-scale, collaborative programs that span national jurisdictions. Secure information sharing for those who work to secure the world

6. TSCP description • TSCP’s charter provides a framework for secure collaboration and sharing of sensitive information in international defence. • TSCP delivers solutions that support the shared vision of the partners for a new A&D trading platform – where community-standard, enterprise-wide specifications and reference-able implementations make secure information sharing a reality A collaborative forum

7. TSCP description • The TSCP standards are not just for handling information to government customers. It is for establishing a cost effective secure collaboration framework for the entire industry. • Impact on everyone within: • Procurement (Export Control - EC), • Product development (Intellectual Property protection - IPP), • Engineering (IPP), • Sales and after sales (EC and commercial advantage protection), • Customer management (EC and IPP), • Maintenance (EC). A framework for the entire A&D industry

8. CertiPath’s role • TSCP is managed by CertiPath, a private-sector entity institutionalized within the TSCP framework • CertiPath provide both governance and development services: • Design Authority, development and prototyping • Program management and other contracted services • Advocacy, advice, influence and socialization, working with Governments and trade associations, non-aligned to any organization

9. CertiPath’s overview Companies which do not want to operate their own CA’s Other industry Bridges (automotive, transportation/cargo, banking, etc.) • CA Providers: • ARINC- Exostar • SITA Boeing BAE EADS Northrop Lockheed Martin CertiPath Othergovernments US Federal Bridge CA UK MoD (in process) TBD DoD NASA DoT DHS

10. Current TSCP membership Major industry suppliers/OEMs Government and administrations

11. TSCP Member main benefits • Demonstrate compliance with export control regulations • Meet governments’ emerging requirements for identity assurance • Protect corporate IP in collaborative and other information sharing programs • Protect personal privacy data of employees • Have collaborative toolsets that will interoperate with customers and suppliers Reduce risk and increase control

12. TSCP Membership and participation • Immediate ability to demonstrate trustworthiness to governments, project partner companies and supply chains based on a common language, processes and protocols. • Playing an active role in defining the operating rules and mechanisms for federated trust environments • Opportunity to build on the collective expertise in a broad range of policy and regulatory questions, influence specifications

13. TSCP Membership and participation • Large critical mass in the TSCP of prime contractors, • Advantages adopting the TSCP standards early, as there will be competitive advantage to being first supplier ready to work with these new standards. • Taking a position on the TSCP is probably more cost effective than any other possible approach, as • the TSCP is collectively discussing secure collaboration with the correct government players, and • The TSCP is helping to influence many of the choices that various governments are making in their directions for collaboration with industry. Consistent voice to customers, suppliers and governments

14. TSCP Membership and participation • Individually, most of the companies at the TSCP table already have a fairly large place in the revenue projections of companies like Microsoft and IBM. • If these vendors hear exactly the same tune coming from all of the TSCP participants, that becomes an almost deafening voice to have changes put through quickly. • We are actively working with several vendors to improve the capability of their products to support secure collaboration Louder voice to vendors

15. TSCP Membership and participation • A company joining TSCP has a voice at the table, and is able to participate in the collective accumulation of knowledge of how to collaborate securely • A TSCP member also has the ability to influence how a given technology is implemented, and to push for a solution that will be more easily adopted by their organization. • Huge cost savings through adoption of a common collaboration framework, as this: • simplifies audit for compliance and government regulation, • reduces costs due to common infrastructure, and • reduces time to market, as a custom infrastructure does not need to be established for each new product, program or project Influence now, rather than be a victim later

16. TSCP Membership and participation • Commercial organizations gain a seat at the table with customers and prospects where the rules of the working relationship are defined • Defence agencies gain considerable ability to ensuredata security as information passes from their network to the supply chain • TSCP offers a two-tiered membership to meet the needs of organizations seeking to gain a distinct advantage by ensuring that the mechanisms used with customers and partners tomorrow take into account nuances of their policies and infrastructure.

17. TSCP – Platinum member • Government defence agencies and their prime contractors are eligible for TSCP Platinum membership. • Participation at this level entitles the organization to all the rights and privileges TSCP offers, including • A TSCP Governance Board (GB) seat with full voting rights • May bring forth new problem area descriptions for consideration as they like and for those accepted they will fully participate in their life cycle. • Full representation and participation in the Enterprise Architects Group and the Program Management Group

18. TSCP – Gold member The Gold level is new for 2007 and caters to organizations looking to get the majority of benefit at a 50 percent reduction in cost. Gold Members in the TSCP are entitled to: • Participate in the requirements definition process and can bring forth a TCC • Be one of the three required members for a TCC’s ratification • Play an active role in the Enterprise Architects Group and the Program Management Group

19. TSCP – Partner member • Partners have the opportunity to participate in the creation of specifications and in the reference implementation to prove technical feasibility. • While this IP will be released to the public domain when complete, partners benefit from early access to specifications and requirements

20. TSCP – Partner member benefits • A captive customer base that defines its own product needs, builds reference implementations and then turns the requirements over to partners for creating general availability solutions • Increased goodwill with customers through work on specifications and reference implementations • Participation in TSCP’s Enterprise Architecture Group (EAG) with government organizations and prime contractors. • Accreditation against published specifications and inclusion in product catalog through CertiPath for products aligned to TSCP member needs

21. Discussion and Q&As

22. Contact details • TSCP – Outreach Director: Marc Speltens • Marc.Speltens@certipath.com • Office: +32 2 745 05 62 • SITA/CertiPath: John Pawlicki • John.Pawlicki@certipath.com • Office: +1 310 782 7357 • TSCP – Outreach Director: Jeff Nigriny • Jeff.Nigriny@certipath.com • Office: +1 703 793 7740

23. Web sites • www.certipath.com • www.tscp.org