Counting the links – understanding the software supply chain

Software applications and ‘systems’ are typically built using a combination of components, modules and plug-ins. And, with the prevalence of cloud computing these days, many of these elements can now be outsourced. So how can IT managers control this new supply chain and ensure software quality and integrity as part of this process?

A company’s total software system or ‘stack’ today can be thought of as a multi-dimensional, complex organism composed of many living, moving parts. Some IT industry analysts have tried to simplify this by describing the modern software ‘system’ or network as a patchwork quilt with many interrelated layers, additions and embellishments.

This multi-layered argument rests on the fact that modern software stacks are built out of a variety of components including:

• Core operating system (or operating systems)
• Boxed off-the-shelf applications
• Bespoke custom-built applications
• Embedded software
• Mobile device software
• Hosted software applications (delivered via cloud computing services)
• Other outsourced software
• Open source software components
• Other smaller ‘dedicated’ application software

You need to be a subscriber to read the rest of this article.

Already a subscriber? Sign in here