CLAIM-2026-09-21-11

Section 30 BSIG lists supply chain security, including security-related aspects of relationships with direct suppliers, among the risk-management measures an in-scope entity must implement.

Why it matters

It makes the plugin marketplace and its git host a named part of the measures owed, not an optional hardening step.

Sources

• covingtonbu2026germany