Securing the Cyber/Software Supply Chain
All event times are U.S. Eastern time
Executive Order 14028 (Improving the Nation’s Cybersecurity) established new requirements to secure the federal government’s software supply chain. The requirements involved systematic reviews, process improvements, and security standards for both software suppliers and developers, in addition to customers who acquire software for the federal government.
The software supply chain is only truly secure when all entities throughout the public sector carry out effective and coordinated security measures to ensure the integrity of the supply chain. This virtual workshop will review key practices in cyber supply chain risk management, including how to develop a strategy that contains standards, information sharing, and involvement of all the stakeholders.
Learning objectives include:
- Hear examples of how agencies are mitigating software supply chain security risks and complying with government guidelines (M-21-30, M-22-18, and SP 800-218).
- Learn how to respond to vulnerabilities on a continuous basis
- Hear an overview of the threats the software supply chain faces
- Understand risk management and cybersecurity best practices to help protect the software supply chain
Welcome and Opening Remarks
President, Digital Government Institute
Creating Repeatable Processes for Managing IT Supply Chain
Director, Cybersecurity Supply Chain Risk Mangement, U.S. State Department
Strengthen Security in Your Software Supply Chain
Chief Architect, Red Hat
Supply Chain Risk Management (SCRM) Service Element Lead, NASA
Confessions of a Participant in Supply Chain
Founder and COO, SteelCloud
The Evolving Landscape of Cyber Threats: Stopping Unauthorized Code Execution in Your IT Environments
Group Manager, R&D – Post Quantum & Secure Software Supply Chain Initiatives, Venafi
Update: NIST SP 800-204D 'Strategies for the Integration of Software Supply Chain Security in DevSecOps CI/CD Pipelines'
Supervisory Computer Scientist, NIST
- CPE CREDITS: 2.0
In order to receive CPE credit, attendees must fulfill all of these requirements:
- Attend the entire program
- Respond to all poll questions
- Complete and submit the post-event survey