An Achilles heel of today's armed forces: Managing software supply chain risk in the military sector

Alexandra Paulus

No 6/2025, SWP Research Papers from Stiftung Wissenschaft und Politik (SWP), German Institute for International and Security Affairs

Abstract: Today's armed forces are highly dependent on software. Software products are built by complex networks of software components, software vendors, service providers, and other companies that, together, form the software supply chain. In "conventional" cybersecurity incidents, threat actors usually gain direct access to their target. But in the case of the software supply chain, the risks originate upstream in the supply chain itself and have an impact on entities downstream - often the end users. The armed forces are particularly vulnerable to these risks. Software supply chain incidents in the military sector have caused disruption and allowed malicious actors to engage in industrial espionage, political espionage, and sabotage. Policymakers and the Bundeswehr can manage software supply chain risk in the military sector through a set of measures. First, decision-makers should determine the requisite level of protection for the various areas of software use to strike a balance between risk management, on the one hand, and the functionality, cost, and speed of deployment, on the other. Thereafter, the Bundeswehr should establish effective risk management. Further, the federal government and the Bundeswehr should ensure that software suppliers reduce the software supply chain risk posed by their products. By doing so, the armed forces can be given adequate protection.

Keywords: armed forces; software supply chain; software supply chain risks; complex networks; cybersecurity incidents; industrial espionage; political espionage; sabotage; Bundeswehr (search for similar items in EconPapers)
Date: 2025
References: Add references at CitEc
Citations:

Downloads: (external link)
https://www.econstor.eu/bitstream/10419/335863/1/1941509347.pdf (application/pdf)

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:zbw:swprps:335863

DOI: 10.18449/2025RP06

Access Statistics for this paper

More papers in SWP Research Papers from Stiftung Wissenschaft und Politik (SWP), German Institute for International and Security Affairs
Bibliographic data for series maintained by ZBW - Leibniz Information Centre for Economics ().