Supply Chain Security

Q: What supply chain security requirements appear in contracts?

Common requirements: SBOM disclosure, vulnerability notification within 24-48 hours for third-party components, restrictions on open-source licenses, code signing requirements, and periodic dependency audits.

ClauseOps

Supply chain security addresses the risks inherent in the development, delivery, and maintenance of software and hardware components. It includes vendor vetting, dependency management, SBOM (Software Bill of Materials) tracking, and code signing. Enterprise contracts increasingly require supply…