Manage The Risks of Software Reuse
Code reuse is common, but leaders must be aware of potential vulnerabilities to mitigate exposure to risk. Current software development practices rely heavily on the use of preexisting components, typically sourced from public repositories, to add functionality. The recent discovery of a critical vulnerability in a commonly used component called Log4j highlights the risks of software reuse: It affected every piece of software that includes the component. The authors provide four key insights for leaders as they consider how their organizations can manage the risks of software reuse.