Software assurance was traditionally the kind of boring security discipline relegated to technical journals while cybersecurity threats grabbed headlines. But over the last decade, a risk intertwined with software assurance practices started to grab end-user attention, especially in government hallways – supply chain security. Used to describe not only the more technical need to address the security of both the final product and all of the components that comprise it, but the concept of supply chain security also encompasses some of our worst fears about foreign interference in trusted technology solutions.