Article: We Need Assurance!
https://www.acsac.org/2005/papers/Snow.pdf


'We Need Assurance!' is a paper from 1999 by Brian Snow of the NSA. It is a classic in the computer security literature. In certification the term assurance is used to name those activities that safeguard that products sold as certified are indeed entitled to this claim. Supply chain assurance is a distinct field of security and the parallels with the concerns of this paper are obvious throughout.