In Brief

Starbucks' Supply Chain: A Global View on a Global Brew

The Starbucks team looks to reduce risk through training, surveillance and supply chain programs - and to keep up with rapid growth

By Michael Goldberg

June 19, 2007CSO

Risk Management

Starbucks team looks to reduce risk through training, surveillance and supply chain programs - and to keep up with rapid growth

When he describes the security function's goals at Starbucks Coffee Co., Francis D'Addario shares a 13-syllable mantra: Protect people. Secure assets. Enable mission.

Those six words inform everything the Starbucks security team does, from keeping coffee buyers safe on trips to Indonesia and Ethiopia, to helping coffee baristas understand what to do if there's an attempted robbery, to monitoring coffee shipments from farm to roasting plant to corner store.

D'Addario, vice president at Starbucks, and members of his security team Elizabeth King, vice president, information management services; Sean Dettloff, manager, partner and asset protection; and Rick Gipson, director, U.S. partner and asset protection gave an overview of the company's asset protection strategies to about 200 attendees at the CSO Perspectives conference here.

Among the points the Starbucks team made:

  • Their challenges increase because the $7.8 billion company with 13,000 stores in 40 countries is growing so fast, about 20 percent annually, opening up on average six new retail outlets daily. D'Addario said Starbucks security focuses on identifying risk and investing in risk mitigation measures that show return on investments; authenticating partners, trusted agents and goods providers; building a global view of operations that reports exceptions. The company also seeks continuous improvements in people, process and technology "in a culturally relevant way."
  • The security team has built what it calls "Enterprise Security Platform," a central security facility that "converges enterprise and physical security," by monitoring critical facilities, retail stores, as well as monitoring conditions around the globe.

  • Container security is a key part of supply chain management. Starbucks uses video monitoring of  loading facilities, to capture images of loading and sealing containers with "container security devices" a magnetic device that tracks the closing of the container doors, its opening, and temperature and humidity along its journey. The device also is capable of uploading data from third party logistics providers. And it detects tampering. (Starbucks rejected using RFID or GPS devices as not worth the cost, Dettloff said.)

  • A cross-functional governance council sets company policies for the company. Starbucks has built an electronic policy library to help employees know what to do and how to do it.

  • Security provides in-store training to employees to help them understand how to handle risky situations, from customers who turn violent to criminal activity. Design elements also provide for lighting and clear visibility into stores. Future enhancements call for furniture designed to help consumers protect their handbags and laptops, Gipson said.

RESOURCE CENTER
Loading...
VIRTUAL CONFERENCE
Data Center Directions Virtual Conference

Data Center VCAttend this free, 100% online event exploring tools and techniques for making your data center deliver for today and tomorrow.

» Learn more and register here

WHITE PAPER
Maximizing Site Visitor Trust Using Extended Validation SSL

VeriSignNow with Extended Validation (EV) SSL available from VeriSign, you can show your customers that they can trust your site. Learn about EV SSL benefits in the free VeriSign white paper.

» Read the Paper

Featured Sponsors
Sponsored Links

5 Steps to Secure Outsourced Application Development

CA's IT Security centralizes your identity management to turn security into a proactive, business-building tool

Efficient - Flexible - Compliant

Any company can promise identity protection. Only Debix can prove it

7 Requirements of Data Loss Prevention

Information Security: Data Drains and How to Prevent Loss

How Are Open Source Development Communities Embracing Security Best Practices?

IDC Defines an Identity and Access Management Submarket

Using Likewise to Comply with PCI Data Security Standard

IDC Defines an Identity and Access Management Submarket for Managing Privileged User Accounts and Meeting GRC Requirements

Enabling Compliance with Converged Mainframe Security and Storage

Managing SSL Security in Multi-Server Environments

The Latest Advancements in SSL Technology

How to Offer the Strongest SSL Encryption

Forrester Total Economic Impact (TEI) report: Save Millions in Fraud Losses.

Get in Compliance With Government Data Regulations

Manage your IT more effectively

Secure your virtual and physical environments with the same software

Simplify your data center with Juniper Networks. View the webcast

E-LOAN Maintains Reputation as a Privacy Leader with Symantec

Data Loss Prevention: Keeping Sensitive Data Out of the Wrong Hands

Prudential Financial Protects its Brand with Symantec

Envision Identity-Based Access Control for the Datacenter

Digital Identity Protection and Data Security Get Personal

Welcome to the age of Service-Oriented Security (SOS)

When Customer Relationship is Everything, Businesses Bank on SSL Solutions

Everything Today's CISO Needs to Know About Using SSO to Succeed in the Web 2.0 Era

The Case for Business Software Assurance ~ Securing Your Applications

Maximizing Site Visitor Trust Using Extended Validation SSL

Solving Online Credit Fraud Using Device Reputation

Understanding Data Location is Imperative for Data Loss Prevention

Taking the Botnet Threat Seriously