1370 views This article is co-authored by Shuli Goodman PhD, Executive Director, LF Energy, Chris Blask, Global Director Industrial and IoT Security, Unisys and Dick Brooks, Co-Founder, Reliable Energy Analytics LLC The energy industry is well aware of the risks from cyber threats. However, the visibility and sheer scale and scope of the Solarwinds software breach that ripped through the US Federal government and 425 of the Fortune 500 reveals that our software supply-chains need attention, immediately. While it may take years or months to unwind the destruction, solutions for securing software supply-chains need to be identified now. The SolarWinds breach raises the central question, “how do you know if you can trust a software object, before you install it in a critical system?”