MITRE’s System of Trust: A discussion about standardizing software supply chain risk

The supply chains for developing software have become more complex than ever before, with an increasing number of stakeholders — as well as the number of components in today’s software products. Alongside this increase in supply chain complexity, there has been a dramatic uptick in attacks on these supply chains. News headlines frequently tout new software supply chain attacks, making end users and stakeholders concerned with the security and integrity of the software products they depend on. 

For stakeholders …

attacks complexity components mitre products risk software software supply chain software supply chain risk stakeholders supply supply chain supply chain risk supply chains system trust