FlagThis

Abstract

Virtual Intelligence Briefing (ViB) conducted a survey of IT and security professionals who are responsible for software supply chain security. A majority overstate the maturity of their supply chain security programs, with confidence outpacing actual rates of automation, compliance readiness, and SBOM/code signing. These gaps can be closed, however, by focusing on automation of signing and security checks, defining and enforcing policies, deploying the right tools, and more thoroughly embedding security into software development workflows.