The state of software supply chains: 2025 research
New research from Canonical and IDC shows 70% of IT teams spend more than 6 hours per week on security patching
The latest research from IDC, co-sponsored by Canonical and Google Cloud, finds that 70% of organizations see open source software as extremely important to run mission-critical workloads.
But securing open source supply chains poses many challenges and places heavy burdens on IT teams. The survey indicates that 70% of IT teams spend more than 6 hours per week on security patching.
Learnings on global software supply chains
We surveyed 500 organizations with more than 250 full-time employees to understand what major challenges they face in securing their open source supply chain – and why these issues exist in the first place.
Read the full report for deeper insights into:
- Why almost 60% of IT decision-makers are not confident in their organization’s ability to patch critical vulnerabilities within 24 hours
- Why 9 out of 10 IT decision-makers would prefer to source dependencies from OS packages
- What barriers are blocking organizations from ensuring their software is compliant with regulations
- How AI is making the compliance landscape more challenging, with 60% of organizations reporting they have only basic or no security controls to safeguard their AI/ML systems.
To read more about this and the steps organizations can take on their path to resilience with open source software, download the report.