Challenges of securing a software supply chain

The challenge for a CISO is not only identifying all the potential open-source or third-party components that have been used in an enterprise system but also auditing the maintainers to ensure secure coding practices and vulnerability patching.