DSIT commissions research on open source software security best practices

Article summary

The Department for Science, Innovation and Technology (DSIT) has commissioned research to map and evaluate existing best practices for managing risks related to open-source software. The research examines how organisations should manage risks when using open source components in their software development activities, exploring the effectiveness of current guidance across different organisation sizes and sectors. This forms part of DSIT's wider work to improve software security and resilience policy, addressing specific concerns around open source dependencies and their maintenance in the software supply chain. The research will inform future interventions for both public and private sectors on promoting best practices for managing open source software risk.