Business Leader’s Guide to Establishing Software Supply Chain TrustPage 2 Import Process - software that enters the organization requires strict validation controls Build Process - code must be built with a secure build service to prevent compromise Run Process - code needs to be validated for integrity and security at runtime Executive Summary Leaders concerned with the security of the software they produce and purchase need to be aware of an emerging attack vector. SolarWinds, Codecov and many other software vendors have been subject to bad actors who are exploiting weaknesses within the digital supply chain to penetrate internal development environments and compromise software development processes. The result is tens of thousands of end customers compromised by simply instal

Join for free to read