ICIT Virtual Briefing: Software Supply Chain Security - Balancing Internal Orchestration with Attack Vendors

ICIT Virtual Briefing: Software Supply Chain Security – Balancing Internal Orchestration with Attack Vectors

Along with security controls and AppSec policies, the way you and your teams treat the software you build over time impacts the speed at which you can react to a threat. The truth is that open source software (OSS) is often treated as if it isn’t a security problem—until it is. The log4j vulnerability and the subsequent CISA emergency directive was a sharp example of why leaders must take an active role in proactively mitigating risks associated with OSS. The right discipline and hygiene habits build the muscles you need to keep the window of opportunity for attackers within your risk tolerance.

To compound OSS risks even further, the rise of the malicious coder has made cyberattacks easier to perpetrate and harder to detect. Weak security controls in the OSS supply chain and ecosystem have encouraged the explosion of attacks in recent years. CVEs, while still important, have become table stakes. The need for strong risk telemetry related to our open source usage is now a critical control in Application Security. Difficult problems are often solved by going back to basics.

Join our esteemed panel to explore and discuss.

• What does the vulnerability landscape look like currently?
• Have we built the right muscles to react and update our applications quickly?
• How do you overcome the culture barriers to achieve adoption and integration of a secure development program?
• What are key takeaways and lessons learned from recent cyberattacks?

Panelist

• Nick Sinai, Senior Advisor at Insight Partners, Adjunct Faculty at Harvard Kennedy School, and author of Hack Your Bureaucracy (Moderator)
• Robin Yeman, Chief Technical Officer, CCTI and TEDX Speaker 
• Renata Spinks - Assistant Director IC4 and USMC Senior Information Security Officer at United States Marine Corp
• Invited: Major Steven Whitman, Cyber Researcher, US Army
• Bryant Schuck, Senior Product Manager for Checkmarx

 

Earn 1 CPE