Explore how CNCF best practices for software supply chain security were implemented at 3M to enhance their security posture in this conference talk. Learn about the journey to improve code security, including the evangelization of improved security policies and informing various organizational functions. Discover how these best practices were applied to enhance policy, process, procedure, and build across the Software Development Lifecycle, with a focus on securing open-source components. Gain insights into 3M's response to supply chain attacks and vulnerabilities like Log4J, and understand their approach to implementing standards-based Software Bill of Materials (SBOM). The presentation covers topics such as DevSecOps, Joe Biden's Executive Cyber Security Order, the CNCF document, dynamic inventory, and valuable lessons learned throughout the process.
Using CNCF Best Practices to Enhance Software Supply Chain Security
CNCF [Cloud Native Computing Foundation] via YouTube
Overview
Syllabus
Intro
Ryan Gibbons 3M
Software Supply Chain
How This Worked at 3M
Where Did We Start
Before and After
DevSecops
Joe Bidens Executive Cyber Security Order
The CNCF Document
What is it about
The document
Conors approach
Dynamic Inventory
Lessons Learned
Taught by
CNCF [Cloud Native Computing Foundation]
Related Courses
-
Securing the Software Supply Chain: From Threats to Best Practices
-
Open Source Software Supply Chain Security - Understanding Threats and Best Practices
-
Supply Chain Security - The First Steps
-
A Different Kind of S3 - First Line Security of the Supply Chain
-
Fight Back Against Cyber Risk in the Software Supply Chain - Secure DevSecOps Pipeline for Regulated Environments
-
Supply Chain Security with KubeClarity: Introduction and Implementation
