An Acronym Free Introduction to Software Supply Chain Security - Joshua Lock, Verizon
Channel: CNCF [Cloud Native Computing Foundation]
Date: 2024-03-21

Don't miss out! Join us at our next Flagship Conference: KubeCon + CloudNativeCon North America in Salt Lake City from November 12 - 15, 2024. Connect with our current graduated, incubating, and sandbox projects as the community gathers to further the education and advancement of cloud native computing. Learn more at https://kubecon.io

An Acronym Free Introduction to Software Supply Chain Security - Joshua Lock, Verizon

No acronyms, just principles. In recent years, since Secure Software Supply Chain (and similar terms) entered the standard software development lexicon, it has become increasingly difficult for even subject matter experts to unpack all of the standards, tools, legislation, and more. This talk is designed to provide a lighthearted foundation for exploring and understanding the rapid-moving space of software supply chain security without using unfamiliar acronyms or expecting any expert knowledge. We will introduce principles and practices that can help to secure any software supply chain, regardless of size or infrastructure, and refer to open source projects and standards that can help achieve the principle in your own software supply chains. We’ll also introduce some common terms, so that you can bust them out in future discussions and impress your friends.