Trust in code: the new frontline of defence supply chain security

▤ Summary

The author argues that defence supply chain risk has moved from physical components to software, models and continuous updates, making static, point-in-time assurance models inadequate. She calls for continuous verification practices such as software bills of materials (SBOMs), provenance tracking and automated checks on build integrity so every change can be traced and validated. She cautions that AI can help prioritise and detect anomalies but should remain a support capability because opaque or biased inputs can mislead decisions. She urges standardised, enforceable requirements across MOD programmes, clearer accountability for primes and realistic, scalable baselines for SMEs to improve security without blocking innovation.

▦ Linked Companies