“Managing third-party components for security so that if there's a vulnerability discovered in some component you're using, about it and you're able to respond to it.”

Transcript evidence from Steve Lipner — The Past, Present, and Future of SDL.