2024软件供应链安全风险现状报告组织的应对措施调查 英文版 (2).pdfVIP

TheStateofSoftwareSupplyChain

SecurityRisks

U

SponsoredbyBlackDuck

IndependentlyconductedbyPonemonInstituteLLC

PublicationDate:May2024

PonemonInstitute©ResearchReport

TheStateofSoftwareSupplyChainSecurityRisks

PreparedbyPonemonInstitute

May2024

Part1.Introduction

Thepurposeofthisresearchistounderstandhowpreparedorganizationsareinreducing

softwaresecurityrisksinthesupplychain.SponsoredbyBlackDuck,PonemonInstitute

surveyed1,278ITandITsecuritypractitionerswhoareinorganizationsthatarecommittedto

achievingasecuresoftwaresupplychainandhavesomelevelofresponsibilityfortheir

organizations’softwaresupplychainsecuritystrategy.Theregionsandcountryinthisresearch

areNorthAmerica(613respondents),EMEA(362respondents)andJapan(303respondents).

AccordingtotheN