A Systemic Approach for Assessing Software Supply-Chain Risk | IEEE Conference Publication | IEEE Xplore