Analysis on Software Supply Chain Security Standards

This study examines domestic and international security standards and policy trends in response to the rising incidence of software supply chain attacks, proposing measures to enhance software supply chain security. It reviews laws and systems related to software supply chain security in key regions, including the United States, the European Union (EU), and Japan, while also examining international standards and industry trends in software supply chain security. In this study, we analyze software supply chain security policies and systems of major countries to derive domestic institutional supplements, and suggest policies and institutional directions for strengthening domestic software supply chain security in the future.