Which option represents a best practice that directly supports supply chain security rather than IP protection?

• A. Establish robust IP protection measures for proprietary data
• B. Encrypt all data at rest to protect IP
• C. Consolidate suppliers to reduce complexity
• D. Establish secure supplier relationships and traceability throughout the supply chain

Answer: (D)

This question focuses on strengthening supply chain security through third-party relationships and traceability. Establishing secure supplier relationships means setting clear security requirements in contracts, conducting due diligence, and maintaining ongoing monitoring, audits, and incident reporting with every supplier. When this is paired with end-to-end traceability across the supply chain, you gain visibility into provenance, movement of materials, and the ability to verify authenticity and detect tampering or counterfeit items quickly. This combination directly enhances the security and resilience of the entire supply chain, enabling rapid response to threats and better governance over who has access to data and materials.

Protecting IP or encrypting data at rest targets safeguarding proprietary information, not the secure operation of the supply chain itself. Consolidating suppliers reduces complexity but doesn’t inherently ensure security across all partners and touchpoints; it can even introduce single points of failure.