Abstract: A system and method for automation and managing of security requirements and software supply chain in a software development lifecycle in a service-oriented architecture. Shared components can be used in the implementation of multiple software applications and each component has a functionality in the application and a set of controls for its implementation. A requirements library provides a list task requirements for each application which are applicable to the software application based on application context which is adjusted based on the controls required for implementation or controls addressed by the component. The shared components in the component library can be pre-authorized for use and applied to various software projects and applications with tracking, versioning, and dependency management.