Software Supply Chain — The developers, libraries, build systems, repositories and distribution channels involved in producing software.
Why Software Supply Chain matters in finance
Compromise upstream can introduce risk before software reaches a financial institution.
Security is also a market-infrastructure question
In financial services, software supply chain should be understood in relation to operational continuity, data integrity, payments, market infrastructure and interconnected dependencies. A control can be technically effective while still leaving material resilience risk if critical services cannot continue or recover during disruption.