Software Supply Chain Risks ⎪Cassie Crossley (VP Supply Chain Security, Schneider Electric)

An interview-driven article with Cassie Crossley examines the growing threat of software supply chain attacks and shares practical defenses: rigorous review of open source components (with the XZ backdoor as a case study), understanding the limits of SBOMs, securing build and development environments, continuous monitoring, third-party risk governance aligned to NIST CSF 2.0, threat modeling, and developer training; it references SolarWinds and Colonial Pipeline to underscore the stakes and advocates strong governance and vigilance across the lifecycle.