Skip to main content

Ensuring a secure supply chain for Google in Asia Pacific

Securing the integrity of its hardware supply chain is, and will continue to be, a critical focus for Google. Acting as Google’s trusted security partner, NTT DATA helped to assess and uplift the security of their APAC-based manufacturing partners. With improved governance and oversight, Google is able to maintain the integrity of product build processes and, more importantly, improve protections for their products and users.

Business need

Addressing supply chain cyber risk

As one of the world’s largest technology and manufacturing companies, Google is subject to a high level of internal and external cyberthreats to its supply chain, given their brand value and global presence.

Google needed to strengthen their overall cybersecurity posture and independent assurance on the cybersecurity maturity of their contract manufacturers across the Asia Pacific region.

These challenges align with the findings from NTT DATA’s Global Threat Intelligence Report 2022, where NTT DATA research identified a higher adversarial focus across critical infrastructure, manufacturing and supply chains.

Solution

Working with a trusted advisor

In Phase 1, the NTT DATA Singapore team supported Google in enhancing its supply chain security framework.

In Phase 2, we proposed leveraging their framework to assess the cybersecurity capabilities and compliance of its contract manufacturers based in APAC.

These partners manufacture Google’s consumer hardware devices including, but not limited to, Pixel, wearables (Fitbit and Pixel Buds) and home and entertainment (Nest).

As the security and privacy assurance of these devices is a top concern for Google, NTT DATA proposed assessing security controls and recommending best practices across several domains such as secure manufacturing, code security, anticounterfeit, secure station certification and incident response.

Outcomes

Enhanced cybersecurity and cyber resilience

With NTT DATA as a trusted cybersecurity advisor:

  • There is enhanced security visibility over global emerging cyberthreats, resulting in better threat analysis and faster responses to potential threats.
  • Google can concentrate on their core business with the NTT DATA team conducting the independent third-party assessment of Google CM Compliance.
  • There are streamlined security standards, with an improved CM assessment criteria and an enhanced supply chain security framework.
  • Google is looking at not just assessing but also uplifting the overall security posture of its partners through a well-defined program.

About Google

Google LLC is an American multinational technology company focusing on online advertising, search engine technology, cloud computing, computer software, quantum computing, e-commerce, AI and consumer electronics. It has been referred to as “the most powerful company in the world” and one of the world’s most valuable brands due to its market dominance, data collection and technological advantages in the area of AI.

Industry

Technology

Headquarters

United States

Speak to an expert

Technology has the power to bring together people, data and things. For businesses, connection matters now more than ever. We can help you adapt the way you work to build strong connections that lead to business growth.