Ep 116: What is an SBOM & Why Are My Customers Suddenly Asking for One?

Published: April 25, 2023, 2:36 p.m.

b'With the release of President Biden\\u2019s Executive Order 14028 on \\u201cImproving the Nation\\u2019s Cybersecurity\\u201d from May 2021 the US public and private sectors have been alerted to the significant cybersecurity risks within our software supply chain. As of the March 2023 release of the National Cybersecurity Strategy, which will shift liability for software products and services to promote secure development practices, it\\u2019s evident that software security needs to be elevated across all organizations.

In this episode, your host John Verry, Pivot Point Security CISO and Managing Partner, sits down with Tim Mackey, Head of Software Supply Chain Risk Strategy at Synopsys, to explore what better software supply chain security means for software development and more.

In this episode, join us as we discuss:

\\xb7 Defining an SBOM what it can include depending on stakeholder needs
\\xb7 The value of SBOMs for both software developers and their clients
\\xb7 Market drivers for improved software supply chain security
\\xb7 Software composition analysis and its role in mapping dependencies and identifying vulnerabilities within code
\\xb7 How the NIST Secure Software Development Framework (SSDF) supports initiatives to improve software supply security

To hear this episode and many more like it, we encourage you to subscribe to the Virtual CISO Podcast.

Just search for The Virtual CISO Podcast in your favorite podcast player or watch the Podcast on YouTube here.

To stay updated with the newest podcast releases, follow us on LinkedIn here.

'