AppSec & DevSecOps

D3: SBOMs. It’s the Least We Can Do…

Thursday, September 22, 2022 1:30 PM - 2:30 PM

Room 503

Description
Application security received renewed interested when last April the White House released its Executive Order beefing up cybersecurity and enhancing software supply chain security. One of the key elements of the Executive Order mandated that Federal agencies demand Software Build of Materials, or SBOMs, from software vendors. Will demanding SBOMs dramatically improve application security for agencies and will the EO have a broader impact on the commercial market? Aside from demanding SBOMs, what are other questions sophisticated organizations are asking of their suppliers to address software risk? What are the deeper security trends impacting organizations that buy and sell software and how can you adapt to meet these trends?