Relationship established
A customer, supplier, research partner, investor, recruiter, conference organizer, visiting scholar, or prospective collaborator establishes a legitimate reason to engage.
Pattern model
The relationship is not the risk. Ungoverned access is.
A common sequence links otherwise different cases. It is a diagnostic model—not a claim that every Chinese partner, researcher, employee, or institution follows it.
01
The transfer chain
Six stages leaders can interrupt
Controls are strongest when they cover the whole path. Stopping at cybersecurity misses recruitment, tacit know-how, commercial leverage, and lawful-but-damaging learning.
Sensitive access gained
The relationship reaches people, laboratories, repositories, samples, prototypes, manufacturing floors, vendor lists, work devices, or the tacit knowledge that makes a process work.
Information acquired
Information is requested, copied, memorized, downloaded, photographed, exported, reverse engineered, or obtained through an insider. The conduct can range from contractual learning to criminal theft.
Assets moved
Files, samples, knowledge, equipment, or personnel move across organizational or national boundaries—sometimes through personal accounts, travel, outside companies, or affiliated institutions.
Technology put to use
The recipient integrates the asset into research, manufacturing, products, bids, training, standards, or further collection. Attribution becomes harder as the knowledge diffuses.
Competitive harm realized
The originator may face lost contracts, compressed development time for a competitor, price pressure, weakened strategic position, litigation cost, or damage that cannot be cleanly priced.
Signals worth combining
One signal is often ordinary. The sequence is not.
A conference invitation, a large download, a new outside company, or a departing engineer can each be benign. Risk emerges when context joins them: unusual access, undisclosed interests, escalating technical requests, travel, commercial conflict, and movement toward a competitor.
Relationship signals
- Invitations whose host, funding source, or agenda cannot be independently verified
- Stipends, travel, gifts, appointments, or equity not disclosed through required channels
- Pressure to route agreements through personal accounts, affiliates, or unfamiliar intermediaries
Access signals
- Requests for source code, file directories, unpublished protocols, supplier identities, or work devices beyond the stated purpose
- Bulk access inconsistent with role, project phase, or previous behavior
- Efforts to bypass material-transfer, export, licensing, visitor, or clean-device processes
Movement and use signals
- Personal cloud, removable media, unusual printing, photography, or unexplained sample movement
- New products, patents, job postings, or company claims that closely track protected work
- A customer reducing purchases while recruiting key staff or requesting deeper technical access