The more daily life becomes software dependent, the more urgent the need for organizations deploying software – including federal agencies – to ensure security in the software supply chain.
That supply chain has several main channels, principally open source components, custom coded and commercial applications.
“There’s not necessarily clean delineation. Those can all kind of come together in one unit,” said Kelly White, the co-founder and CEO of RiskRecon, a Mastercard company.
The software supply chain security question has developed in stages, White said. His own cybersecurity experience dates to when the principal concern was safe code for custom applications. The Open Web Application Security Project (OWASP), established in the late 1990s, still guides people coding and deploying online applications. The widespread adoption of open source components somewhat later.
Watch the full interview with Kelly White on the Federal News Network.
