Procurement Security

Definitions

1. The security review and risk controls applied when acquiring software, hardware, cloud services, or vendors. Procurement security aims to catch risky suppliers, unsafe contractual terms, unsupported products, and supply-chain issues before new technology is introduced into the environment.

   In plain English: Security checks and risk controls used when buying technology or selecting vendors.

   Example: "Procurement security flagged the vendor because its admin support model required always-on access into customer environments."

Related Terms

• Dependency Confusion
• SBOM
• SLSA
• Sigstore
• SBOM Analysis
• Docker Security
• Grey Market
• Outdated Dependency