1. Supply Chain Risk Leadership Council 1 SCRLC August Supply Chain Risk Leadership Council August 2009 Meeting

2. Supply Chain Risk Leadership Council 2 Contents Welcome Prospective Members Agenda Overview GovernanceISO28002 Q3 Newsletter Member Blog SCRLC MNDA Backup Material Objectives Membership Structure

3. Supply Chain Risk Leadership Council 3 Welcome New and Prospective Members

4. Supply Chain Risk Leadership Council 4 Attendee Summary

5. Supply Chain Risk Leadership Council 5 Day 1 – August 25, 2009 08:00 Welcome New Attendees and Introductions Joe McMorrow Johnson and Johnson, Merck, Genzyme 08:05 Council Governance Joe McMorrow ISO28002, Q3 Newsletter, Member Blogs, SCRLC MNDA 08:30 Risk Management at GE Mike Cairo Deputy Chief Security Officer, GE 09:00 Critical Manufacturing Sector Overview Stuart Ferancy Chief, Critical Manufacturing SSA, DHS 10:00Break 10:15 Member Spotlight Mike Steckel SCRM at Genentech 11:00 Member Spotlight John J. Brown SCRM at Coca Cola 11:45 Knowledge Share – Security Ken Konigsmark Latest in supply chain security 12:15 Knowledge Share – Regulatory Patrick St Laurent Latest in supply chain regulatory 12:45Lunch

6. Supply Chain Risk Leadership Council 6 Day 1 – August 25, 2009 13:45 Track Breakout Sessions BCP and Crisis Tracks Karen Juhl, Bob Weronik Review and Document Best Practices and content for ISO28002 Summarize track discussions and prepare slides for Day 2 Readout Resiliency Tracks Chris Patterson, Robert Larson Security and Regulatory Ken Konigsmark, Patrick St Laurent Risk Assessment and Monitoring John J. Brown 17:00Dinner

7. Supply Chain Risk Leadership Council 7 Day 2 – August 26, 2009 08:00 BCP and Crisis Tracks Karen Juhl, Bob Weronik 45 min Track Readouts 08:45 Resiliency Tracks Chris Patterson, Robert Larson 09:30 Security and Regulatory Ken Konigsmark, Patrick St Laurent 10:15 Risk Assessment and Monitoring John J. Brown 11:00 Wrap up Joe McMorrow Summarize Track Input, Capture Actions and Council Next Steps 12:00Adjourn

8. Supply Chain Risk Leadership Council 8 Deliverable TC Route Stage 1 Preliminary Stage 2 Proposal Stage 3 Committee Stage 4 Enquiry Stage 5 Approval Stage 6 Publication New Work Item Approval Building Expert Consensus Building Inquiry on Draft Formal Vote on Final Draft Publication of Int. Standard First Committee Draft Draft International Standard Final Draft International Std Final Text of Intl. Standard International Standard Formation of a Standard

9. Supply Chain Risk Leadership Council 9 AprMayJunJulAugSepOctNovDecJanFebMarAprMayJunJulAugSepOctNovDec 20092010 28002 Granted work item approval Working Draft SCRLC writes a working draft and submits to TC8 for Review 28002 Approved Work Item TC8 members review and provide feedback to the SCRLC work group TC8 Review TC8 grants approval for 28002 as a CD/PAS (Committee Draft/Public Available Specification) TC8 Approval P-Members of TC8 vote on the CD/PAS 28002 28002 Balloting Period 28002 Development Timeline

10. Supply Chain Risk Leadership Council 10 AprMayJunJulAugSepOctNovDecJanFebMarAprMayJunJulAugSepOctNovDec 20092010 28002 Approved Work Item TC8 Approval 28002 Balloting Period P-Members of TC8 vote on the CD/PAS 28002 Each country votes. 156 countries. Requires 2/3 of TC8 to vote yes and 50% of all the people that vote to vote yes DIS 28002 Routed to All of ISO ISO28002 Is a Published Standard Working Draft TC8 Review 28002 Development Timeline

11. Supply Chain Risk Leadership Council 11 Q3 Supply Chain Risk Review  Thanks to those who contributed to our latest newsletter  Please help to grow the Newsletter community by forwarding to your colleagues and key suppliers  Looking for topics and volunteers for the Q4 2009 edition

12. Supply Chain Risk Leadership Council 12 SCRLC Member Blogs  New collaboration space for SCRLC members  Anyone with access to the SCRLC website can start a blog  Members will be emailed when there is a new blog or a new post to an existing blog  A link will be provided if you want to be removed from future blog alerts

13. Supply Chain Risk Leadership Council 13 SCRLC Member Blogs  Blogs will have a single owner, and can have an unlimited number of Posts, or updates.  Anyone with SCRLC website access can make comments to a Post Blog Posts Comments

14. Supply Chain Risk Leadership Council 14 SCRLC MNDA  All SCRLC Members are asked to please review and sign the Multi Party NDA  Process Please email a softcopy of the signed NDA to info@scrlc.comPlease email a softcopy of the signed NDA to info@scrlc.com info@scrlc.com Softcopies will be uploaded to the SCRLC websiteSoftcopies will be uploaded to the SCRLC website SCRLC MNDA

15. Supply Chain Risk Leadership Council 15 Backup

16. Supply Chain Risk Leadership Council 16 SCRLC Objectives  Expand overall awareness of SCRM and increase membership on the SCRLC  Contribute useful content for ISO 28002 “Resilience in the Supply Chain” and ensure it comprehends industry proven SCRM practices SCRLC Member Participation is essential SCRLC Member Participation is essential  Build an influence and “sense and respond” capability regarding Regulatory and Legislative agencies that affect our supply chains

17. Supply Chain Risk Leadership Council 17 SCRLC Governance Membership Structure CoreCouncil Working Groups CommunityMembers

18. Supply Chain Risk Leadership Council 18 Membership Structure Core Council Role Comprising Industry Practitioners. Responsible for governance of the council. Proposal: Working Group Leaders form the core council Company Representation Director/Senior Manager level involvement with VP sponsorship. Must participate on at least one Working Group. Does not include for-profit consulting firms. Estimated Commitment Quarterly Council meeting (1½ days quarterly) Working group participation  Leadership of semi-monthly Working Group meetings (2 hours monthly)  Working group standards development (2-4 hours monthly)

19. Supply Chain Risk Leadership Council 19 Membership Structure Working Groups (tracks) Role Responsible for defining industry best practices and developing content for 28002 “Resilience in the supply chain” Company Representation Ownership/Responsibility for the applicable supply chain process and/or program. Does not include for-profit consulting firms. Estimated Commitment Quarterly Council meeting (1 ½ days quarterly)—optional Working Group participation  Semi-monthly Working Group meeting (2 hours monthly)  Working group standards development (4-6 hours monthly)

20. Supply Chain Risk Leadership Council 20 Membership Structure Community Member Objective ISO 28002 certified supply chains; Starts with creating a community of supply chain partners that are aware of the emerging practice and standards for supply chain risk management. Role Awareness and preparation for compliance. Access to the SCRLC website, and quarterly newsletter recipient. Opportunities to provide input to SCRLC working groups