DCMS’ Cyber Resilience Team is publishing a call for views on enterprise software resilience and security in early 2023. This marks a major milestone in our work to better understand the security risks related to the development, distribution and use of software. In this panel, we aim to share our approach to software resilience policy, including how we view risks related to open source software. This will include our framework outlining the key risks throughout the software lifecycle, from development through to end use and everything in between. We also aim to elaborate on issues relating to open source software, including resourcing constraints in the open source community, and the need for more secure integration of third-party code by proprietary developers and vendors.