Software Supply Chain Integrity

Know what open-source and commercial components run in the estate, verify their provenance and respond when one is found to be compromised.