“If we are serious about supply chain, which is in the news and an issue for all kinds of reasons related to telecommunications and other things, we need to start to understand the quality and the maintenance histories of what we're using and whether those things are defective or whether they're vulnerable or whether they're actively maintained.”

Transcript evidence from JC Herz and Steve Springett — SBOMs and software supply chain assurance.