SOFTWARE ACQUISITION GUIDE FOR SUPPLY CHAIN SECURITY ASSESSMENT

OSSL Conference Pre-approved Topic alignment: Who Knows What Goes Into Products? Supply Chain Security Challenges Abstract: Many cyberattacks have exploited vulnerabilities and weaknesses in software and within software supply chains; an issue that spans both proprietary and open-source software which impacts both private sector and government enterprises. This session will cover the software acquisition guide which provides a prescriptive method to assess hidden security challenges and poor practices in supply chain ecosystem.