Supply Chain Security

Video: A Civil Discourse on SBOMs

CISA’s SBOM champion Allan Friedman and YL Ventures’ Andy Ellis joins JupiterOne’s CISO Sounil Yu dig deeper into the U.S. government’s response to supply chain attacks and the push for mandatory software bill of materials (SBOMs).

SecurityWeek Video

June 1, 2022

In this highly anticipated discussion, CISA’s SBOM champion Allan Friedman and YL Ventures’ Andy Ellis joins JupiterOne’s CISO Sounil Yu to dig deeper into the U.S. government’s response to supply chain attacks, the push for mandatory software bill of materials (SBOMs), the value and limits of ingredient lists for modern software stacks, whether or not they should be exposed publicly, and how defenders should prepare for the inevitable mandates.

(Session from SecurityWeek’s 2022 Supply Chain Security Summit | March 23, 2022)

Written By SecurityWeek Video

Latest News

Click to comment

Application Security Protection for the Masses

While there are many routes to application security, bundles that allow security teams to quickly and easily secure applications and affect security posture in a self-service manner are becoming increasingly popular.

Joshua Goldfarb

Dealing With the Carcinization of Security

Varied viewpoints as related security concepts take on similar traits create substantial confusion among security teams trying to evaluate and purchase security technologies.

Marc Solomon

Stop, Collaborate and Listen: Disrupting Cybercrime Networks Requires Private-Public Cooperation

No one combatting cybercrime knows everything, but everyone in the battle has some intelligence to contribute to the larger knowledge base.

Derek Manky

How the Atomized Network Changed Enterprise Protection

Our networks have become atomized which, for starters, means they’re highly dispersed. Not just in terms of the infrastructure – legacy, on-premises, hybrid, multi-cloud, and edge.

Matt Wilson

Mapping Threat Intelligence to the NIST Compliance Framework Part 2

How threat intelligence is critical when justifying budget for GRC personnel, and for threat intelligence, incident response, security operations and CISO buyers.

Landon Winkelvoss