Page 126 - (ISC)² CISSP Certified Information Systems Security Professional Official Study Guide

Integrating cyber security risk management with supply chain,
acquisition strategies, and business practices is a means to ensure a

more robust and successful security strategy in organizations of all
sizes. When purchases are made without security considerations, the
risks inherent in those products remain throughout their deployment
life span.