85% of CIOs were instructed by the Board of Directors or CEO to take actions to improve the security of software development and build environments.<\/p>\n
80% of the 1,000 CIOs in a new survey report that their organizations are vulnerable to cyberattacks targeting software packages supply chains, so it is important to look for a lasting solution to solve the problem.<\/p>\n
Several strategies were implemented to effectively address cyberattacks in the supply chain: 84% of respondents are increasing the budget to protect supply chain attacks, 68% of CIOs have introduced more security controls, 56% are using additional code signing and 47% are investigating the provenance of their open source libraries.<\/p>\n
Implementing changes to better protect the supply chain is difficult for some organizations, because changing their safety practices and controls would require a fundamental change in structure.<\/p>\n
Since not all companies can take the above security measures, analysts have presented code signing as the necessary response to stop supply chain attacks.<\/p>\n
The use of code signing for the vulnerable systems allows companies to detect unsigned malware before it can wreak havoc on their supply chain and that of their customers.<\/p>\n