Denver OWASP July Meetup - Join Us!

Everyone is welcome! Bring a friend...

Join us on July 17th for food, drinks, networking and an exciting presentation. Networking with your peers starts at 5:00 - food is served at 5:30 and the presentation starts at 6:00.

This month's meeting is brought to you by Synopsys!

Presentation: Managing the Complexity of Software Supply Chains

**Abstract:**Software supply chains are significantly more complex than a traditional materials-based supply chain or B2B software procurement effort. The risk elements in software supply chains are different from those assessed during vendor risk management efforts and are constantly evolving. For example, studies have shown that the average commercial application has hundreds of component suppliers – each with their own release criteria, coding standards, and risk management.
Regulated industries and global legislative efforts to learn how risk informed software supply chain management can function without disrupting development velocity. SBOMs are a core component of software risk management, but it’s only one element. Attestations, threat models, and continuous threat monitoring transform a simple SBOM into a pillar of a modern cyber risk management program.