Categories
Events

Heparin, Swine Flu, and the Essential Supply Chain Data

Here we go again.  A recent Bloomberg article once again cited the potential shortage of Heparin, a critical blood-thinning medication.    Attached is the recent article, as well as a case study/excerpt from my book, “Single Point of Failure:  The 10 Essential Laws of Supply Chain Risk Management”.   Once again, the importance of collecting, monitoring and managing critical supply chain data by the products/value you produce comes front and center.  Over the past decade, I’ve worked with more than 50 organizations to design, apply, improve, and deploy activity-based risk management.   Contact me @ gary.lynch@theriskproject.com  if you’d like to learn more.

Latest Article

Deadly Pig Disease Sparks Fear of a Heart Drug Shortage

EXCERPT FROM MY BOOK (currently being revised as 2nd edition)

 

A case study demonstrates how a critical supply chain can be more vulnerable

than anyone thinks. The drug heparin is derived from animal liver cells and

is a vital anticoagulant (formula C12H19NO20S3). It prevents blood clots and is

used to treat acute coronary disease, a trial fibrillation, thrombosis, and pulmonary

embolism; clinical trials for the treatment of arthritis, asthma, cancer, and

even organ transplants are promising. It is also used in bypass and other heart

surgery operations. In other words, it is a vital drug. David Strunce, president

of Scientific Protein Laboratories, Baxter Lab’s main supplier of heparin, says

that the Yuan Intestine and Casing Factory is not in his company’s supply

chain. Scientific Protein can’t trace its supplies in China in as much detail as it

can in the United States. “We’re all dealing with the China collection system,”

Mr. Strunce reported.

China is the world’s largest heparin exporter, shipping more than $100 million

of the substance a year. China’s lack of consistent oversight of its heparin

industry highlights a regulatory gap that’s opening as drug makers increasingly

go shopping globally for ingredients. The raw heparin made by China’s myriad

small producers ends up in the hands of about 50 export companies, which sell

to customers overseas. In the first half of 2008, more than 85 percent of these

heparin exports went to the United States, Austria, France, Italy, and Germany,

according to an industry trade group.

An ideal system for tracing heparin back to the barnyard would involve

tagging individual pigs, then keeping files detailing each animal’s record of vaccination,

feed, and overall health. That record could follow the animal to the

slaughterhouse, providing a paper trail that a drug company or the FDA could

later tap into. Many heparin processors, including Changzhou Scientific Protein

Laboratories (SPL), the plant that supplies Baxter, are registered as chemical or

agricultural-byproducts companies and weren’t checked by health authorities.

Abraxis Pharmaceutical Products, or APP Pharmaceuticals, Baxter’s main rival,

says its Chinese supplier, Shenzhen Hepalink, is able to trace refi ned heparin

back to individual pigs. Shenzhen Hepalink also says it requires suppliers of raw

heparin to follow rules designed to minimize the chances of contamination.

The agency did, at most, 21 inspections of Chinese drug-making facilities

annually in fiscal years 2002 through 2007, according to the U.S. Government

Accountability Office (GAO). That represents a fraction of the 714 Chinese facilities

that, as of the end of fiscal 2007, the GAO says were involved in making

drugs or drug ingredients for the U.S. market. FDA Commissioner Andrew von

Eschenbach has said he would like to station inspectors in China.

Because heparin is derived from living tissue, companies that purify raw

heparin follow a range of steps—filtration, heat treatments, and other processing—

to reduce the risk that it may contain active viruses or bacterial toxins. Since

(continued)

192 Single Point of Failure

mid-2006, China’s pig herds have suffered serious outbreaks of porcine reproductive

and respiratory syndrome, a viral illness commonly known as blue-ear

disease. Sick animals are supposed to be rejected by slaughterhouses, but

enforcement can be lax. Also, infected animals may be slaughtered before

symptoms are recognized.

Some drugmakers say it’s important to be able to trace back to the pigs that

served as raw materials. That way, if patients have adverse reactions to a drug,

the root problem can be discovered and other possibly tainted batches can

be pulled from the market. Many Chinese heparin manufacturers say this is a

very difficult standard to meet in China’s business and agriculture environment.

Wang Shengfu, manager of another raw-heparin maker in China’s Shandong

province, Linyi Meiyuan Seasoning Co., notes that unscrupulous business people

and middlemen can easily “provide buyers with fake records.”14

By 2010, China is expected to produce nearly 25 percent of the world’s

pharmaceutical ingredients, according to a recent study by the investment firm

Credit Suisse. “If you haven’t been in a plant for the last two or three years,

you don’t have any clue what’s going on in those places,” said a congressional

source familiar with investigative work into the FDA by the House Commerce

Committee’s subcommittee. “They could be running monster truck rallies on

the plant floor, and we wouldn’t know about it.”

“The computer infrastructure is outdated, it’s not stable, there is insufficient security and capability,” said Dale Nordenberg, a Science Board member

who specialized in the computer systems. “The FDA is still relying on

an amalgamation of paper-based records and poorly integrated electronic

platforms.” The two main FDA databases cannot agree on how many foreign

companies are subject to FDA inspection. One claims the number is 3,000,

the other 6,800. Compounding the confusion, the FDA uses corporate

names, rather than identification numbers, to track production plants and

registration information. For an agency monitoring the operations of companies

in dozens of countries worldwide, this creates confusion. Indeed,

Scientific Protein’s China operation slipped through the FDA’s inspection

regimen primarily because of confusion over the company’s name. But

Nordenberg is hardly encouraged by the agency’s admission this was at the

root of the FDA’s failure to inspect the plant. “That’s just another heparin

timeline,” he said.15

One expert says as much as 70 percent of China’s crude heparin—for

domestic use and for export—comes from small factories in poor villages. One of

the biggest areas for these workshops is in coastal Jiangsu Province, north

of Shanghai, where entire villages have become heparin production centers.

In a village called Xinwangzhuang, nearly every house along with a narrow

street double as a tiny heparin operation, where teams of four to eight

women wearing aprons and white boots wash, splice, separate, and process pig

Law #6: Managing Production Risk Is a Dirty Job 193

intestines into sausage casings and crude heparin. The floors had large puddles

and drainage channels; the workshops were dilapidated and unheated;

and steam from the production process fogged up the windows and soaked the

walls. There were large ovens to cook ingredients and halls lined with barrels

to store enzymes, resins, intestines, and wastewater. “This is our family-style

the workshop,” said Zhu Jinlan, the owner of one heparin operation, who stopped

sorting pig intestines and invited visitors to a back room, where she lives with

her husband and child. “We’ve been doing this for about ten years.”

Experts say the small, unregulated factories could pose dangers because

they do not have the same controls and rules as large slaughterhouses, which

also produce crude heparin. “If you don’t control the incoming source, it’s very

hard to get rid of the contaminants,” says Liu Jian, a heparin expert at the

The University of North Carolina. Mr. Strunce of SPL says his company never buys

directly from the crude-heparin producers, only through its wholesalers, which

he called “consolidators”—Changzhou Techpool, its Chinese joint venture

partner, and Ruihua. His company, he said, has records documenting all the

transactions. But in Rugao, producers of crude heparin tell a different story.

A sales manager for a major supplier, Nantong Koulong, said he sells directly

to SPL without going through either of the two wholesalers. “We provided crude

heparin to Changzhou SPL,” said the sales manager, Chen Jianjun. Some of

Koulong’s stock comes from the unregulated workshops, he said. The owner

of one such workshop, Ms. Zhu in Xinwangzhuang, said she sold to SPL two

years ago. She also sells to Koulong. “We are really a traditional family-style

plant,” she said. “We have no certificate.”

After an outbreak of blue-ear pig, the disease swept through 25 of China’s 31

provinces and regions in 2008, prices soared and many drug suppliers had to

look to the small workshops. The epidemic said Cui Huifei, a heparin expert at

the Shandong University School of Medicine, “made those biotech companies

inevitably purchase from the family-style plants, for cheaper prices.”16

Categories
BLOG - Risk For Competitive Advantage

Time to move beyond supplier risk?

Time to move beyond supplier risk?

Why are so many organizations “surprised” when they find out that their supply chain had become a victim of the latest disruptive event?   I’m not referring to just those who manufacture the product but rather to all those that depend on it; customers or patients, suppliers & distributors, producers, and yes, even competitors.   Recently, hospitals experienced an IV saline bags shortage and Newell’s  Rubbermaid brand experienced a shortage of resin.

Why the surprised?  After all, haven’t most organizations invested in supplier (3rd party, vendor) risk management programs and technologies.   In my last blog, we even discussed the maturing process of the supplier risk product market.  So why are organizations and customers/patients still experiencing major shortages and supply chain disruptions?

They say a picture is worth many words, so I’ll try to set the stage for the following illustration.

SCM SCOPE

As you can see, the scope of what risk in the supply chain is actually being managed is part of the issue.  The scope narrows further when you consider that only a portion of the suppliers, the ones considered the highest risk to the organization, are actually being actively monitored and managed.  If you rely on property-based supply chain risk assessments than the scope is typically limited to just your property, plant, equipment, and maybe inventory (it may include suppliers and your loss of revenue if you have contingent business or time element coverage – consult your broker).   The business interruption insurance may be limited as well, to a narrow set of events such as fire, rising water, and other similar hazards.

What’s needed?

The scope of what should be considered begins with an understanding of industry economics and your organization’s role in creating value.  It’s important to first understand the broader industry value chain for your “franchise” products.  When a disruptive event occurs this understanding will simplify your understanding of market dynamics amongst buyers (customers, patients, wholesalers), producers, suppliers, and competitors.   How will demand change?  Will you be subject to displacement exposure such as when IV saline bags moved from Puerto Rico to Mexico?  Once you understand the industry value chain and forces you will then need to look to your business units/divisions to uncover the “franchise” products or services and the associated activities that create and deliver value to the market.   I suggest a little bit of research and discussions with executives to identify the “franchise” products or services and the measure to use.   The goal is to reveal whether the economic priorities such as revenue, margin, liquidity/cash, innovation/growth, etc.  At the end of the day, it’s all about profitability but the reality is the organization’s incentives will drive the behaviors.

Now you have the target, i.e. what matters most.  You can then move on to the critical activities that support the “franchise” products or services.  The supply chain encompasses many of these activities but the important element here is to highlight the activities that create your distinguishable or unique value.   By doing so, you establish the operational priority and associated financials.  Eventually this will get you to the allocation but more importantly, this framework provides a holistic view of the most critical supply chains.  Remember – if you’ve seen one supply chain, you’ve seen one supply chain.

You are now ready to map the extended supply chain for what matters most (from an economic perspective).  The mapping should not only look far beyond the 1st tier up and downstream but also should like at critical resources such as labor and skills; technology, processing and data; physical assets; and relationships.    This might sound like a bit of work but remember, this is your franchise and the leaders pay attention to what matters most.  Also, it’s important to do your homework and talk with others in the financial planning, process improvement, risk & insurance management and other areas.  Much of the data and profile most likely exist.

Once you have the map you can then analyze the importance and contribution of the individual node in that particular supply chain, assess and measure the risk, identify mitigation and financing options, model a risk-return on investment, gain support for the investment, deploy the solution, monitor and report on it, drive towards continuous improvement.   That’s a mouth or a mindful so I plan to break down some of these elements in future blogs.  However, you can get a jumpstart by picking up a copy or image of the book, “Single Point of Failure:  The Ten Essential Laws of Supply Chain Risk” or references on my website.

Categories
BLOG - Risk For Competitive Advantage

Vendor (3rd party) Risk: Who will win the platform wars?

Over the past seven years we’ve witnessed extensive growth in the vendor risk management cloud-based solutions market (also commonly referred to supplier and third-party risk).   Two major events in 2011 accelerated market expansion; the Tohoku earthquake and tsunami and Thailand floods.  The market for vendor risk assessment and management solutions shifted from a concept (stuck in the chasm between early adoption and the early majority) to reality as many automotive, electronics and other manufacturers realized the need for greater transparency and monitoring of their upstream supplier network.  Vendor risk management regulation (e.g. HIPAA, OCC 2013-29, MMOG/LE, ISO 9001:2015, IATF 16949:2016) and pressure to comply with more stringent vendor risk assessment requirements by the large hi-tech, automotive, energy, chemical companies requirements led to further market expansion.

The law of physics applies here as well; what goes up must come down or in this case, markets consolidate as solutions become more widely accepted and less unique.  The commoditization phenomenon leads to acquisitions, roll-ups and yes, even the demise of the weak.

What are the implications to your current vendor risk management program?

The big question, which general platform will thrive and which will just survive.   Let’s take a quick look at the market for solutions.  Here’s one way to view the market of direct and indirect solution providers.

  • ERP (Enterprise Resource Planning) and operations platforms that include vendor risk management capabilities as well as APIs to integrate data feeds (e.g vendors such as SAP, Oracle, IBM, QAD).
  • Procurement, Sourcing and Vendor Management platforms that are managed by the CPO and sourcing functions and dedicate entire modules to vendor risk  (e.g. vendors such as Ariba, ProcureWare, Gatekeeper, Ivalua, HICX).
  • Risk Driven GRC, Supply Chain Risk and Data-Risk platforms that are typically managed by sourcing, procurement, enterprise risk management, and/or supply chain risk management functions.  (e.g. vendors such as Resilinc, RiskMethods, Lexis Nexis, D&B, Rapid Ratings, iTrust, Hiperos, Logicgate, Navix, 360 Total Solution, SupplierSelect, Virima)

All provide valuable intelligence to decision makers on how to anticipate and react to vendor risk in the upstream supply chain.  However, the risk driven platforms (GRC, Supply Chain Risk and Data-Risk) platform) market will be the first to see consolidation, acquisition and exiting.  History has demonstrated that risk-based solutions in the technology space ultimately succumb to the OEM providers of performance (firewalls, anti-viral software, desktop and network security hardware/software).   The ability for the risk-based platforms to operate as a stand-alone market for an extended period of time is highly unlikely; market penetration and working capital (or investment) is minuscule in comparison to the activities of the ERP an Procurement platform providers.  All ships rise with tide and eventually, many of the advanced risk monitoring and assessment features will be standard to the broader operational platform offering.

Now is the time to begin assessing how the shift will impact your vendor risk management program.  Questions such as: where is the vendor data maintained and how easily can it be ported or exported to another platform?  Will the same level of risk rigor and associated features be maintained if the risk platform is integrated into and ERP or Procurement platform?  Organizationally, who will be responsible for the conversion, integrity and sustainability of the new/modified solution?  These are just a handful of the many questions that you will need to begin thinking about as the market transforms.

What do you think?  Please comment or send me a note to discuss further.

 

Categories
BLOG - Risk For Competitive Advantage Diversifying SPOFs in Supply Chains Supply Chain Risk

Keeping Shipping Afloat

250,000+ workers stranded at sea

250,000 seafarers are stuck at sea at increasing risk of physical and mental exhaustion. The numbers are staggering and growing. Here’s a brief rundown of the exposure.

Supply Chain Risk Grows as Weary Crews Halt Ships and Clog Ports. CLICK HERE =>. Bloomberg

The Global Supply Chain’s Stranded Workers, by the Numbers

The pandemic has left merchant sailors stuck at sea for months longer than they anticipated. CLICK HERE => Marker

Categories
BLOG - Risk For Competitive Advantage

LESSONS LEARNED: GAINING STRENGTH FROM A CAT5 HURRICANE

Hurricane Ivan: Gaining Strength from a Devastating Event

Excerpt from Gary S. Lynch, “At Your Own Risk: How the Risk-Conscious Culture Meets the Challenge of Business Change”, John Wiley & Sons, Chapter 6, Page 145-150.

What is a risk conscious culture and how does an organization go about establishing one? I begin our discussion with a real life story of how the actions by a group of business leaders, post a tragic event, created a ‘‘best practice’’ of how to build a risk conscious culture. At a tactical level, these leaders improved their disaster preparedness. However, the benefits went far beyond developing just a process. What occurred instead was a conta- gious awareness of the risks and appreciation of how it affects others.

The incident was a category three hurricane named Ivan, and the place was the Cayman Islands (the fifth largest banking center in the world). Ivan damaged more than 95% of the buildings1 and disrupted essential value chains such as food, water, shelter, supplies, communications, and energy and it’s core revenue generator—financial services processing. Everyone on the island had been affected both behaviorally and financially. However, after it was all over, the impact of Ivan then became the genesis for another great phenomenon. A risk conscious culture emerged born from the desire by the business leaders to proactively, rather than reactively, manage risk. In all my years working for/with hundreds of organizations, I had never witnessed such an example as the one I was exposed to in the Caymans. I have a profound respect for Gene Thompson and Paul Marchena for bringing together a set of diverse leaders for the purpose of learning and addressing those vulnerabilities that they could do something about. The result was improved preparedness, greater resiliency, increased participation by a much broader community of stakeholders, more effective alignment of risk investment with business priorities and most importantly—a risk con- scious, sensitive and responsive community of business leaders.

Several months after the devastating category-three Hurricane Ivan, a community of business and social leaders came together in what was originally a post-mortem meeting. Their individual frustrations motivated them to engage in a conversation about the economic and social impact of Ivan, and what could be done differently next time to reduce the exposure. After three meetings it was clear that the theme had shifted from a limited view of their own businesses to one of a communal economy. They recognized the need to begin a dialogue about risk issues long before an event could occur (e.g. hurricane, pandemic or other natural disasters). They realized that they had a symbiotic relationship, which had advantages and disadvantages.

With the help of Gene and Paul, the group rallied another dozen or so leaders to the first meeting. Prior to the group getting together, Gene requested that I survey some of the Executives in order to identify what worked, didn’t work, what close calls were avoided, and what their individual priorities were. What I discovered was that communication be- tween the government and business was a major issue, as well as between the business leaders, the general community and their international customers. I also found that the leaders behaved as if the storm only affected them, instead of harnessing the power of the interdependent community.

My assignment was to lead the research and facilitate the sessions. The leaders demanded action and they got it, a risk consciousness amongst the group emerged. They inventoried their competencies and capabilities, and then began to determine how they can benefit from each other. For example, satellite phones were made available so that the Executives could stay in touch with each other and their overseas customers, high ground was allo- cated for the storage of critical vehicles, special fuel delivery was pre-arranged, pre-arranged delivery of lumber was offered to critical sites, a web site was created, employees became more involved in the preparation, heavy duty transportation vehicles were identified, and emergency response procedures were shared. The group went as far as building a bunker so the leadership team did not have to evacuate the island during a crisis. When Hurricane Dean hit in 2007 these new capabilities were activated. Fortunately, the storm took a southerly turn and spared the island. Regardless, they were ready to manage the worst possible outcome. From my home in New Jersey I was able to watch the action first-hand via the security cameras mounted on one of the participant’s buildings in the Cay- mans. Remote monitoring was one of many improvements that was implemented and activated. The leaders listened to each other, understood the collective needs and

then agreed to who would contribute what to ensure economic and social resiliency. Fortunately, the CEOs and other Senior Leaders at the Thompson Development Group, Hurley’s Groups of Companies, Cayman Water Company, Cayman Utilities, Workplace Environments, A.L. Thompson’s, Brown’s Mobile Fueling, Fosters Food Fair Supermarkets, Marsh, and others have taken action and benefited from the lessons of Hurricane Ivan (ironically, the storm first made land on September 11, 2004). They are proactively managing risk both individually and as a community.

Categories
BLOG - Risk For Competitive Advantage

COVID-19: A Major Review of How to Protect the Entire Pharma Supply Chain.

I was honored to contribute! Congratulations to Dr Nicola Davies for bringing together a multidisciplinary report entitled COVID-19: A Major Review of How to Protect the Entire Pharma Supply Chain.

This is such an important and timely body of research. I strongly recommend picking up the report but only if you are seeking practical, action oriented advice. Stay safe!

Categories
BLOG - Risk For Competitive Advantage Supply Chain Risk

MANAGING RISK: Diversifying the Supply Chain (or hedging against political risk)?

TSMC Plans to Build and Operate an Advanced Semiconductor Fab in Arizona (U.S.)

Are organizations starting to reduce geopolitical exposure by diversifying their supply chains? The TSMC announcement to build and operate a semiconductor facility in Arizona represents not only a multi-billion dollar investment but also potentially an enormous reduction in risk. The majority of TSMC fabs are located in a few small regions in Taiwan. These multi-billion fabs currently face significant earthquake and typhoon risk. However, political and pandemic exposure has been exponentially increasing in the region, and organizations are being forced to rethink their supply chain strategy and design. Businesses in Hong Kong face a similar growing threat as well (note: much of the system level testing occurs before being shipped to mainland China for assembly). Will businesses in these regions be the first to reconfigure their global supply chains with risk and performance simultaneously optimized? Stay tuned! I expect to see more organizations seek to diversify critical nodes in their supply chains (i.e., despite the headlines, I don’t believe we will see organizations immediately abandon geopolitical hot spots).

Categories
BLOG - Risk For Competitive Advantage

Major Earthquake Strikes Nevada – Spares Reno This Time

THE VALUE OF EVENT MONITORING

A 6.5 magnitude earthquake struck the Reno, Nevada area at 5:30 am on the 15th of May 2020. Have you checked your supply chain? Is this event relevant to your business and could it impact profitability? For example, do you rely on a major drug wholesaler whose warehouse and transportation networks are in the area? At approximately $2-5 an hour, is event monitoring software worth the cost? Are you able to detect a potential disruption in near real-time? Do you know how and where it will impact your supply chain? Are you able to quantify the potential impact to customers in near real-time? Are you ready to capture the UNCERTAINTY ADVANTAGE? How does the earthquake in Nevada (or an infinite number of events) affect fill rates, supply chain, product, and material inventory?  

There are more than a dozen supply chain event monitoring products in the market #resilinc#riskmethods), all can be implemented in days by you, the supplier, or by a 3rd party such as The Risk Project. Worth the investment?

UPDATE 18 May 2020: It appears Reno and the surrounding businesses dodged a bullet. Click here to see what might happen if a quake struck Reno.