According to the United States Department of Homeland Security, software security is a serious risk of using COTS software.
The US Department of Homeland Security has sponsored efforts to manage supply chain cyber security issues related to the use of COTS.