SUPPLY CHAIN RISK MANAGEMENT

Second, open source has become an integral part of modern applications. In most cases, externally sourced components are open source. Modern applications often rely on hundreds of open source components and frameworks. Third, development organizations have embraced agile soft-ware development processes. The modern development process is rapid, continuous, and collaborative. While development teams have embraced agile software devel-opment processes, the shifting software development landscape has also introduced new risks and requirements in the software supply chain. Applications can be composed of hundreds of com-ponents sourced from a myriad of open-source projects and these components can in turn, depend on other components, known as transitive dependencies. This creates an enormously complex software supply chain, where a single application may contain com