OM DENNE EPISODE
According to the Verizon Data Breach Report, Log4j-related exploits have occurred less frequently over the past year. However, this Common Vulnerabilities and Exposures (CVE) flaw was originally documented in 2021. The threat still exists despite increased awareness. Over the past few years, the Software Engineering Institute (SEI) has developed guidance and practices to help organizations reduce threats to U.S. supply chains. In this webcast, Brett Tucker and Matthew Butkovic, answer your enterprise risk management questions to help your organization achieve operational resilience in the cyber supply chain.
What attendees will learn:
- Enterprise risk governance and how to assess organization's risk appetite and policy as it relates to and integrates cyber risks into a global risk portfolio
- Regulatory directives on third-party risk
- The agenda and topics to be covered in the upcoming CERT Cyber Supply Chain Risk Management Symposium in February
Engelsk
USA
I DENNE EPISODE
UDSKRIFT 🔗
Are you the producer of this podcast?
Add a podcast transcript
Need Audio-to-Text?
Transcribe with Listen411 in Just 60 Seconds
SØK BLANT TIDLIGERE EPISODER
Søk etter gamle episoder av Software Engineering Institute (SEI) Webcast Series.
ANDRE EPISODE I DENNE PODKAST
AI is transforming both the threat landscape and our defensive capabilities. What does cyber mission readiness mean in this new environment? A researcher from the CERT Division of Carnegie Mellon University's (CMU's) Software Engineering Institute (SEI) describes the current challenges and emerging…
Software management is too frequently ignored or addressed piecemeal in systems. Cyber threat actors take advantage of gaps and errors in their attacks, which they can accomplish throughout the lifecycle. Exploiting these gaps and errors allows them to compromise processes, practices, and procedure…
Are you confused about what should be in your Software Acquisition Pathway program's Capability Needs Statement (CNS)? You are not alone! One of the most frequent requests we receive is for a sample CNS. If only it was that easy! Never fear; our recently released Tactical Guide called Cracking the …
Many organizations practicing DevSecOps have collapsed under the weight of their own tooling. These organizations tried to solve delivery problems by stacking Kubernetes, Helm, GitOps controllers, scanners, and templating systems until no one can explain their own deployment path. This webcast cuts…
Is your program really ready to adopt the SWP? Next in the Software Acquisition Go Bag series, we'll walk you through our new Tactical Guide called SWP: Ready, Set, Go! This guide provides proven techniques to assess the project's readiness to adopt the SWP; identify any shortfalls; and obtain the …
Ansvarsfraskrivelse: Podkasten og kunstværket, det finnes indlejret på denne siden, er fra SEI Members of Technical Staff, som tilhører dens eier og ikke er tilknyttet eller godkjent av Listen Notes, Inc.
REDIG
Takk fordi du hjelper med å holde podkast-databasen oppdatert.
