[MadVikingGod]

While reading this I was struck with an interesting question: What risk does any particular software vendor pose to an industry at large?

For example (making up numbers here): if 75% of all airline computers have croudstrike falcon installed that seems like a very concentrated risk.

I actually wouldn't be surprised if we had this we would see really high concentrations of a small number of vendors in any industry.

[anticristi]

The EU DORA regulation (Digital Operational Resilience Act for Financial Entities) has explicit provisions to avoid concentration risks. I heard a story that a bank was forced to use Google Cloud, because two other banks were already on AWS and Azure.

[saltminer]

Alternatively, if Oracle hikes the price on an industry-specific product by 75%, how much of that industry goes under?