As physical and cybersecurity threats continue to rise with increasing complexity and frequency, aerospace and defence companies need to ensure they are taking every measure to protect their data and their products, both internally and across their supply chain. Four experts from Smith, the independent distributor of electronic components, sat down to discuss how A&D companies can and should protect themselves from the threats of today – and beyond.
Security concerns are becoming more complex with the development of new technologies. What can A&D companies do to ensure they’re protected, both physically and digitally?
Mike Mercado, Chief Information Officer: A&D companies need end-to-end visibility into the security of their supply chains, to start. Build an all-inclusive, interconnected vision of physical security, cybersecurity, and compliance to be absolutely certain the company is protected against all threats.
Tim McQuade, Managing Director – Aerospace and Defence: They need to have more knowledge than anyone else about the full scope of their supply chain. It’s not enough to simply understand where you get your parts. You need to find out where your suppliers get their parts and what their security and quality standards are.
Allison Levine, Managing Director – Aerospace and Defence: Everyone thinks they know their suppliers, especially the ones they’ve been working with for years, but things are changing rapidly these days. You need to learn even more about who you’re doing business with – as much as possible – to ensure they continue to deserve your trust.
How can A&D manufacturers embed these security measures into their processes without adding delays to their production schedules?
Allison: They need a robust supply chain filled with vendors they have thoroughly vetted and verified. No matter the timeline, you shouldn’t be buying parts off a random Google search – something I have seen firsthand, unfortunately.
Tim: Bad actors take advantage of companies under stress. I know taking the extra steps to fully audit every supplier takes time, but it sets you up to get parts safely and securely from trusted sources, even on condensed timelines.
Art Figueroa, Chief Operating Officer: The best suppliers are also constantly innovating to build better quality-control processes. If you set yourself up with the right supply chain partners, speed doesn’t have to compete with security. You can get the parts you need while still maintaining the proper security posture.
The security requirements of 2026 look vastly different from those of 2016 and will likely transform even further by 2036. With these rapid shifts in the security space, what can A&D companies do to protect against the unknown?
Mike: The first step is to be incredibly proactive. Both manufacturers and their vendors have to make significant, sustained investments to ensure their security postures are not only robust, but leading edge. Advanced managed detection and response (MDR) and endpoint detection and response (EDR) solutions enable you to identify, contain, and eliminate suspicious activity before it can escalate.
Art: Security can’t be a one-time initiative at any stage of the supply chain – it needs to be a continuous journey. Companies need to invest in advanced technologies, skilled personnel, and ongoing training to stay ahead of emerging threats.
Allison: This is especially true for vendors in a sensitive market like A&D. By maintaining a strong, transparent, and continuously improving security posture, top-tier independent distributors help safeguard the broader ecosystem in which their customers operate. This commitment reinforces their role as serious, dependable players in the market, ones that prioritise security, resilience, and trust at every level.
What defines a security-focused distributor for the A&D industry and how can companies ensure they’re working with the best?
Mike: The best distributors will not only comply with vetting and audit requests but welcome them. They should be able to back up their claims with proof, including internal audits, robust procedures, and third-party certifications like AS6081, ISO/IEC 27001, and TAPA. Your suppliers need to show they take security as seriously as your company does – if not more so.
Art: Fulfilling the requirements of these certifications should be the bare minimum. Top-tier distributors will surpass them, building stronger security postures to protect your parts at the highest level possible and continue to innovate upon their existing processes.
Tim: They should also have dedicated compliance teams to help navigate today’s dynamic regulatory environment. Policies can shift quickly and drastically, especially in this space. A knowledgeable partner will adapt proactively to changing demands, ensuring a secure – and fast – process.
Allison: Working closely with a distributor and developing a relationship with your point of contact builds the mutual trust and respect needed for a successful partnership. At the end of the day, the best distributors are the ones with the best people, and the best people are the ones who treat their customers right.
This article originally appeared in the July/August issue of Procurement Pro
