A software development company needs to mitigate third-party risks to its software supply chain. Which of the following techniques should the company use in the...