In-person event
Software supply chain attacks have increased over recent years. As shown by a recent KPMG study, 73% of organisations have reported at least one serious disruption from a third party in the last three years. Software supply chain attacks represent some of the hardest type of threats to prevent because they exploit the trust relationships between vendors and customers and machine-to-machine communication channels. Indeed, most of today’s software is not written from scratch but is a combination of source code coming from third parties, which software developers have less control over. Software supply chain attacks exploit vulnerabilities in the supply chain. Therefore, managing software vulnerabilities and promoting initiatives aiming at increasing transparency on the software components and supply chain, such as the Software Bill of Materials (SBOM), are important measures to reduce cybersecurity risks.
Against this backdrop and in the context of the Cybersecurity@CEPS Initiative, CEPS organises a fireside chat with Allan Friedman (CISA), on the 30th of November from 9:30 to 11 am.
Biography of the speaker:
Dr. Allan Friedman is Senior Advisor and Strategist at the Cybersecurity and Infrastructure Security Agency in the US Government. He coordinates the global cross-sector community efforts around software bill of materials (SBOM), and works to advance its adoption inside the US government. He was previously the Director of Cybersecurity Initiatives at NTIA, leading pioneering work on cybersecurity, including running the first public government-led collaboration on coordinated vulnerability disclosure. Prior to joining the Federal government, Friedman spent over a decade as a noted information security and technology policy scholar at Harvard’s Computer Science department, the Brookings Institution, and George Washington University’s Engineering School. He is the co-author of the popular text “Cybersecurity and Cyberwar: What Everyone Needs to Know,” has a degree in computer science from Swarthmore College and a PhD in public policy from Harvard University.
Registration and coffee from 09:15 onwards
Registration ends 29/11/23 at 12:00