Securing the software supply chain is too often an afterthought. However, high-profile attacks, such as those carried out on SolarWinds and the Colonial Pipeline, are proving too costly to allow security to be kicked down the road in the software development process. The U.S. government is now demanding via an executive order that organizations become better stewards of the software supply chain. Are you ready?