Posts on software supply chain

The cyber red flags that matter in due diligence change the price or stop the deal: hidden breaches, contested IP, regulatory exposure and deep security gaps.

Third-party cyber risk is the chance a supplier causes you a security incident. Manage it by tiering suppliers, setting requirements, contracting and checking.

DORA reaches UK tech suppliers through EU bank contracts: mandatory clauses, register data, an LEI, subcontracting controls and, for a few, direct EU oversight.

Product security (ProdSec) protects a product across its whole lifecycle, design, build, supply chain and support. A practical UK guide.