Software Supply Chain Risk Management (SSCRM) and Application Security have the same end goal: making sure unacceptable amounts of software risk don’t end up in the portfolio.