<<Security Requirement>> Software assurance and supply chain risk management (copy) ()