Supply Chain Security Courses and Certifications

In this session, Ed Amoroso covers 5 areas of focus to understand and reduce supply chain risks; review processes, inspect hardware/software, specify vendor requirements, monitor for vendor issues, and proxy comms to unknown sources.

• Cybrary
• On-Demand
• Paid Course

RSA Conference

Supply Chain Security - Part 1

Explore best practices for establishing trust across supply chains and gain insights on shifting from technology inspection to relationship-based trust in an era of increased third-party dependencies.

• YouTube
• 1 hour 24 minutes
• On-Demand
• Free Video

RSA Conference

RSAC 365 Virtual Seminar - Supply Chain Security

Explore open-source supply chain threats, defense frameworks, and incident response strategies. Learn to track attackers, protect your organization, and shift thinking on supply chain security from experts in the field.

• YouTube
• 1 hour 59 minutes
• On-Demand
• Free Video

Supply Chain Armoring: Tools and Techniques for Open Source Projects

Explore tools and techniques for securing open source supply chains, addressing urgent issues and US Executive Order requirements for critical software protection.

• YouTube
• 41 minutes
• On-Demand
• Free Video

SLSA Conformance - Understanding Build System Requirements and Trust Decisions

Explore SLSA framework for software artifact integrity, build system requirements, conformance program, and trust decision enforcement in supply chain security.

• YouTube
• 31 minutes
• On-Demand
• Free Video

Open Source Supply Chain Security - Are Containers the Biggest Blind Spot?

Experts discuss open source supply chain security, focusing on container vulnerabilities, SBOMs, and best practices for managing security in modern engineering toolchains.

• YouTube
• 40 minutes
• On-Demand
• Free Video

Supply Chain Security: From Infrastructure to Application, Code to Cloud

Explore best practices for securing the entire software supply chain, from infrastructure to application, covering code, cloud, dependencies, and deployment.

• YouTube
• 50 minutes
• On-Demand
• Free Video

Zero-Trust Supply Chain Security with Sigstore, TektonCD and SPIFFE

Explore cutting-edge tools for enhancing software supply chain security, focusing on Sigstore, TektonCD, and SPIFFE implementations in zero-trust environments.

• YouTube
• 50 minutes
• On-Demand
• Free Video

Authenticating Supply-chain Metadata - Building Remote Code Attestations on GitHub

Explore techniques for authenticating supply-chain metadata and building remote code attestations on GitHub, enhancing software security and integrity in the development process.

• YouTube
• 39 minutes
• On-Demand
• Free Video

Supply Chain Security, SBOMs and OSPOs: An Ecosystem and Compliance Update

Explore cybersecurity, regulatory compliance, and software supply chain integrity. Learn about SBOMs, the Open Source Security Foundation, and the role of OSPOs in enhancing security.

• YouTube
• 34 minutes
• On-Demand
• Free Video

Maslow's Hierarchy of Supply Chain Needs

Explore Maslow's hierarchy applied to supply chain security, offering insights on prioritizing needs and enhancing overall resilience in the digital ecosystem.

• YouTube
• 32 minutes
• On-Demand
• Free Video

OWASP Foundation

OWASP CycloneDX - Software Bill of Materials Standard

Explore OWASP CycloneDX, a lightweight software bill of materials (SBOM) standard, with experts Steve Springett and Patrick Dwyer. Learn about its features, applications, and importance in modern software development.

• YouTube
• 26 minutes
• On-Demand
• Free Video

OWASP Foundation

Supply Chain Security with Dependency Track

Explore supply chain security using Dependency Track with experts Anandan, Bhargava, and Duster. Learn strategies to mitigate risks and enhance software security in this informative session.

• YouTube
• 54 minutes
• On-Demand
• Free Video

CNCF [Cloud Native Computing Foundation]

Secure Your Project with the SIG Release Supply Chain Kit

Explore tools for enhancing supply chain security in open-source projects, including SBOMs, signed attestations, and secure release pages. Learn how to implement these features using reusable GitHub actions.

• YouTube
• 30 minutes
• On-Demand
• Free Video

CNCF [Cloud Native Computing Foundation]

Building SLSA 3 Conformant Attestors for Artifacts Generated on GitHub

Learn to create SLSA 3 compliant attestors for GitHub artifacts, enhancing software supply chain security with minimal effort using recent framework extensions.

• YouTube
• 34 minutes
• On-Demand
• Free Video