software composition analysis

The individual, group, or organization responsible for conducting a security control assessment.