Prevent, govern, prove

The U.S. Army and Navy are expanding their use of autonomous capabilities across air, ground, surface and subsurface environments. At the same time, attention is turning to the infrastructure and technology that make those systems a reality.

Software is a critical part of that equation. Autonomous platforms can depend on thousands of open source components and layers of interconnected code that creates an often difficult to manage supply chain. That complexity lends itself to a familiar challenge for the agencies and partners supporting these missions: How can teams move faster while ensuring the security, reliability and accountability of the systems they rely on?

At a recent Washington Technology Power Breakfast, Tom Tapley, a product manager at Sonatype, outlined a straightforward approach to managing supply chain risk: Prevent, govern and prove.