6 MiMfg Magazine April 2017
Q
& Conversations A Key
Interview with Lisa Gage , Global Director – GM Information Security and IT Risk Management
Q : As a world class manufacturer , quality of product throughout your supply chain is of utmost importance . How do quality and security go hand in hand when selecting partners ?
Gage : Quality and Security do go hand in hand . And importantly , Safety and Security go hand in hand , as well . Making sure that everyone in the supply chain is aware of and addressing security is vital . That ’ s why we have created a Third Party ( you can read that as supplier / supply chain ) Information Security Requirements statement , which we include in supplier contracts . A document doesn ’ t ensure security , compliance to the requirements is what reduces risk .
Q : Efforts to create self-driving cars and a partnership with Lyft are a few of the recent General Motors headlines . Is the development of autonomous vehicles the primary motivator for General Motors to engage in cyber security or are there other factors in play ?
Gage : General Motors has had an Information Security program for years – autonomous vehicles , mobility technologies and the fast pace of innovation just keep expanding demands on our cyber security programs . Think about protecting Personal Information , Intellectual Property , basic confidentiality , integrity and availability of all systems . Our mission is to reduce risk and to expand our Security coverage , driven by the fast pace of innovation .
Lisa Gage General Motors
11
Joined General Motors in 1997 , as global director of Manufacturing IT plant and product program launches and system deployments .
11
Prior to General Motors , held leadership positions in automotive , natural gas and lean manufacturing / engineering consulting organizations .
Q : It is easy to understand why a large OEM like General Motors would be concerned about cyber security , but what is the risk for a small or medium manufacturer and why should they care ?
Gage : Really the same , maybe at a smaller scale , however the ripple effect can be significant . Think about lack of system availability due to a hack . You miss production and shipping schedule . That disrupts our materials intake and can disrupt our production . What about the integrity of your manufacturing process . Let ’ s say a hack results in a tolerance change out of spec and poor quality parts slip through ….. or you lose your intellectual property , competitive advantage .
Q : You ’ ve been in the automotive sector for a number of years . How have you seen the manufacturing industry change ?
Gage : Way too many changes to detail . What I will say is that pace is what ’ s accelerating . Innovation is in hyper drive . It ’ s exciting and demanding . Continuing to simplify processes , use data analytics , and operate with a sense of urgency is a way of life . These three words might sum it up nicely : Innovation , Speed and Urgency .
Q : What changes are you anticipating this sector to see in the next 5 , 10 , 15 years ?
Gage : I wish I had that crystal ball . Our CEO , Mary Barra said this in December : “ We are in the midst of seeing more change in the next five years than we ’ ve seen in the last 50 years .”
Q : What is one message on cyber security you would like to share with other Michigan manufacturers ?
Gage : Don ’ t think it won ’ t happen to you . No matter what , you can ’ t reduce risk to zero . Impossible . However , you can take steps , every day to reduce that risk . To prevent , detect and contain attacks . 6