CompTIA SecurityX (CAS-005) CAS-005 — Question 229

A software development company needs to mitigate third-party risks to its software supply chain. Which of the following techniques should the company use in the development environment to best meet this objective?