Research & Insights

Frameworks, analysis, and guidance across TPRM, supply chain risk, and vendor governance.

a promotional graphic telling you that PCI Compliance is no longer an annual exercise and that continuous monitory must be built in

All Teams1 Supply Chain Risk Managers16 Procurement Security Professionals10 TPRM Practitioners8 Third-Party Governance Teams7 Vendor Due Diligence Analysts7 Compliance and Regulatory Affairs Teams5 Enterprise Sourcing and Procurement Leaders4

Topics:All1 Software Supply Chain Security27 Incident Management17 Regulatory Frameworks7 Monitoring & Performance2 Supply Chain Mapping2 Foundational Concepts1 Ratings & Risk Tiering1

1 article in Enterprise Sourcing and Procurement Leaders · Software Supply Chain Security · Clear filtersSort byNewest·Trending

Should We Wait 48 Hours Before Installing New Packages?

Software Supply Chain Security

Latest

6 min read

Should We Wait 48 Hours Before Installing New Packages?

Questions from the Front Lines After the Laravel-lang and Intercom compromises hit Packagist in April and May 2025, procurement Slack channels and TPRM team meetings buzzed with questions. These attac

For Enterprise Sourcing and Procurement LeadersRead article

Research &amp; Insights

Should We Wait 48 Hours Before Installing New Packages?

Research & Insights