<<Security Requirement>> Software assurance and supply chain risk management ()