Securing the Cyber/Software Supply Chain

All event times are U.S. Eastern time
Feb 29 2024
1:00 pm - 3:00 pm
Virtual Workshop

Executive Order 14028 (Improving the Nation’s Cybersecurity) established new requirements to secure the federal government’s software supply chain. The requirements involved systematic reviews, process improvements, and security standards for both software suppliers and developers, in addition to customers who acquire software for the federal government.

The software supply chain is only truly secure when all entities throughout the public sector carry out effective and coordinated security measures to ensure the integrity of the supply chain. This virtual workshop will review key practices in cyber supply chain risk management, including how to develop a strategy that contains standards, information sharing, and involvement of all the stakeholders.

Learning objectives include:

  • Hear examples of how agencies are mitigating software supply chain security risks and complying with government guidelines (M-21-30, M-22-18, and SP 800-218).
  • Learn how to respond to vulnerabilities on a continuous basis
  • Hear an overview of the threats the software supply chain faces
  • Understand risk management and cybersecurity best practices to help protect the software supply chain


1:00 pm

Welcome and Opening Remarks


Mike Smoyer
President, Digital Government Institute

1:00 pm

Update: NIST SP 800-204D 'Strategies for the Integration of Software Supply Chain Security in DevSecOps CI/CD Pipelines'

Ramaswamy Chandramouli
Supervisory Computer Scientist, NIST

1:30 pm

Strengthen Security in Your Software Supply Chain


Travis Steele
Chief Architect, Red Hat

Kanitra Tyler

Kanitra Tyler
Supply Chain Risk Management (SCRM) Service Element Lead, NASA

2:00 pm

Confessions of a Participant in Supply Chain

Brian Hajost

Brian Hajost
Founder and COO, SteelCloud

2:30 pm

The Evolving Landscape of Cyber Threats: Stopping Unauthorized Code Execution in Your IT Environments


Faisal Razzak
Group Manager, R&D – Post Quantum & Secure Software Supply Chain Initiatives, Venafi

2:45 pm

Closing Comments

  • CPE CREDITS: 2.0

In order to receive CPE credit, attendees must fulfill all of these requirements:

  • Attend the entire program
  • Respond to all poll questions
  • Complete and submit the post-event survey

Registration for FISMA Training Closes Monday, September 11, 2023