Security News > 2023 > March > Snap CISO: I rate software supply chain risk 9.9 out of 10

SCSW On a scale of 1 to 10, 10 being the highest risk, Snap Chief Information Security Officer Jim Higgins rates software supply chain risk "About 9.9".

Ten, for the record, is "Always security hygiene," he told The Register.

Not only is the supply chain at high risk, but it's a tough security problem to fix because a single product can have tens of thousands of software dependencies.

"It's a physics problem," Higgins said, in that software packages are dependent on so many other third-party and open-source software libraries.

The most important thing his fellow CISOs can do to improve supply chain security is to know what software their organization uses and understand the dependencies across the supply chain, according to Higgins.

He recommends adding a full inventory of libraries in use as a start point for fixing the problem, so security staff know exactly what to check.

News URL

https://go.theregister.com/feed/www.theregister.com/2023/03/04/snap_ciso_supply_chain_security/