Security leaders should focus on risk management principles when tackling software supply chain security, according to the Center for Internet Security SVP and Chief Evangelist Tony Sager.
https://www.securitymagazine.com/articles/97795-a-focus-on-risk-in-software-supply-chain-security