Supply Chain Risk Leadership Council 1 SCRLC August Supply Chain Risk Leadership Council August 2009 Meeting

Supply Chain Risk Leadership Council 2 Contents Welcome Prospective Members Agenda Overview GovernanceISO28002 Q3 Newsletter Member Blog SCRLC MNDA Backup Material Objectives Membership Structure

Supply Chain Risk Leadership Council 3 Welcome New and Prospective Members

Supply Chain Risk Leadership Council 4 Attendee Summary

Supply Chain Risk Leadership Council 5 Day 1 – August 25, :00 Welcome New Attendees and Introductions Joe McMorrow Johnson and Johnson, Merck, Genzyme 08:05 Council Governance Joe McMorrow ISO28002, Q3 Newsletter, Member Blogs, SCRLC MNDA 08:30 Risk Management at GE Mike Cairo Deputy Chief Security Officer, GE 09:00 Critical Manufacturing Sector Overview Stuart Ferancy Chief, Critical Manufacturing SSA, DHS 10:00Break 10:15 Member Spotlight Mike Steckel SCRM at Genentech 11:00 Member Spotlight John J. Brown SCRM at Coca Cola 11:45 Knowledge Share – Security Ken Konigsmark Latest in supply chain security 12:15 Knowledge Share – Regulatory Patrick St Laurent Latest in supply chain regulatory 12:45Lunch

Supply Chain Risk Leadership Council 6 Day 1 – August 25, :45 Track Breakout Sessions BCP and Crisis Tracks Karen Juhl, Bob Weronik Review and Document Best Practices and content for ISO28002 Summarize track discussions and prepare slides for Day 2 Readout Resiliency Tracks Chris Patterson, Robert Larson Security and Regulatory Ken Konigsmark, Patrick St Laurent Risk Assessment and Monitoring John J. Brown 17:00Dinner

Supply Chain Risk Leadership Council 7 Day 2 – August 26, :00 BCP and Crisis Tracks Karen Juhl, Bob Weronik 45 min Track Readouts 08:45 Resiliency Tracks Chris Patterson, Robert Larson 09:30 Security and Regulatory Ken Konigsmark, Patrick St Laurent 10:15 Risk Assessment and Monitoring John J. Brown 11:00 Wrap up Joe McMorrow Summarize Track Input, Capture Actions and Council Next Steps 12:00Adjourn

Supply Chain Risk Leadership Council 8 Deliverable TC Route Stage 1 Preliminary Stage 2 Proposal Stage 3 Committee Stage 4 Enquiry Stage 5 Approval Stage 6 Publication New Work Item Approval Building Expert Consensus Building Inquiry on Draft Formal Vote on Final Draft Publication of Int. Standard First Committee Draft Draft International Standard Final Draft International Std Final Text of Intl. Standard International Standard Formation of a Standard

Supply Chain Risk Leadership Council 9 AprMayJunJulAugSepOctNovDecJanFebMarAprMayJunJulAugSepOctNovDec Granted work item approval Working Draft SCRLC writes a working draft and submits to TC8 for Review Approved Work Item TC8 members review and provide feedback to the SCRLC work group TC8 Review TC8 grants approval for as a CD/PAS (Committee Draft/Public Available Specification) TC8 Approval P-Members of TC8 vote on the CD/PAS Balloting Period Development Timeline

Supply Chain Risk Leadership Council 10 AprMayJunJulAugSepOctNovDecJanFebMarAprMayJunJulAugSepOctNovDec Approved Work Item TC8 Approval Balloting Period P-Members of TC8 vote on the CD/PAS Each country votes. 156 countries. Requires 2/3 of TC8 to vote yes and 50% of all the people that vote to vote yes DIS Routed to All of ISO ISO28002 Is a Published Standard Working Draft TC8 Review Development Timeline

Supply Chain Risk Leadership Council 11 Q3 Supply Chain Risk Review  Thanks to those who contributed to our latest newsletter  Please help to grow the Newsletter community by forwarding to your colleagues and key suppliers  Looking for topics and volunteers for the Q edition

Supply Chain Risk Leadership Council 12 SCRLC Member Blogs  New collaboration space for SCRLC members  Anyone with access to the SCRLC website can start a blog  Members will be ed when there is a new blog or a new post to an existing blog  A link will be provided if you want to be removed from future blog alerts

Supply Chain Risk Leadership Council 13 SCRLC Member Blogs  Blogs will have a single owner, and can have an unlimited number of Posts, or updates.  Anyone with SCRLC website access can make comments to a Post Blog Posts Comments

Supply Chain Risk Leadership Council 14 SCRLC MNDA  All SCRLC Members are asked to please review and sign the Multi Party NDA  Process Please a softcopy of the signed NDA to a softcopy of the signed NDA to Softcopies will be uploaded to the SCRLC websiteSoftcopies will be uploaded to the SCRLC website SCRLC MNDA

Supply Chain Risk Leadership Council 15 Backup

Supply Chain Risk Leadership Council 16 SCRLC Objectives  Expand overall awareness of SCRM and increase membership on the SCRLC  Contribute useful content for ISO “Resilience in the Supply Chain” and ensure it comprehends industry proven SCRM practices SCRLC Member Participation is essential SCRLC Member Participation is essential  Build an influence and “sense and respond” capability regarding Regulatory and Legislative agencies that affect our supply chains

Supply Chain Risk Leadership Council 17 SCRLC Governance Membership Structure CoreCouncil Working Groups CommunityMembers

Supply Chain Risk Leadership Council 18 Membership Structure Core Council Role Comprising Industry Practitioners. Responsible for governance of the council. Proposal: Working Group Leaders form the core council Company Representation Director/Senior Manager level involvement with VP sponsorship. Must participate on at least one Working Group. Does not include for-profit consulting firms. Estimated Commitment Quarterly Council meeting (1½ days quarterly) Working group participation  Leadership of semi-monthly Working Group meetings (2 hours monthly)  Working group standards development (2-4 hours monthly)

Supply Chain Risk Leadership Council 19 Membership Structure Working Groups (tracks) Role Responsible for defining industry best practices and developing content for “Resilience in the supply chain” Company Representation Ownership/Responsibility for the applicable supply chain process and/or program. Does not include for-profit consulting firms. Estimated Commitment Quarterly Council meeting (1 ½ days quarterly)—optional Working Group participation  Semi-monthly Working Group meeting (2 hours monthly)  Working group standards development (4-6 hours monthly)

Supply Chain Risk Leadership Council 20 Membership Structure Community Member Objective ISO certified supply chains; Starts with creating a community of supply chain partners that are aware of the emerging practice and standards for supply chain risk management. Role Awareness and preparation for compliance. Access to the SCRLC website, and quarterly newsletter recipient. Opportunities to provide input to SCRLC working groups