Which framework provides guidelines for securing software supply chains?
- NIST SP 800-161
- SLSA Framework
- Both A and B
- Neither
Answer: Both A and B
NIST SP 800-161 covers supply chain risk; SLSA (Supply-chain Levels for Software Artifacts) defines integrity levels for build processes. Critical for secure software delivery questions.