Study highlights secure software supply chain best practices | Computer Weekly
Summary
Almost half (46%) of the IT decision-makers polled are considering certifying processes and tools used to build software as a key measure to mitigate the risk and impact of supply chain attacks. In the report, Suse said the survey data shows that in-house auditing of software is considered the most important measure to mitigate the risk and impact of supply chain attacks. Those based in the US and Europe believe goals on source-code auditability (14%) will be re-evaluated, with the lowest share in Germany (11%) and the highest in the Netherlands (19%), followed by France (17%). Suse also found that responses to questions for software supply chain risks were dependent on respondents’ present role in the business. Suse also reported that in-house auditing of software is a significantly more popular measure in Germany (53%) compared with the UK and Netherlands (both 38%), with France at the average (43%).