How to Fight Threats to the Software Supply Chain

After several high-profile cyber incidents resulting from exploited vulnerabilities, the Office of Management and Budget released a memorandum (M-22-09) in 2022 that requires agencies to adopt a Federal Zero-Trust architecture. This new architecture includes a key element: requiring agencies to meet specific cyber standards, including application security testing, by the end of 2024.

Two elements of modern software are growing in importance for application security teams: open source code and APIs. A recent report found that 41% of AppSec managers named open source software supply chain attacks as their top cause of breaches, so it’s an ongoing threat. As for APIs, the connecting role they play also makes them a fast-growing target for bad actors.

Join us as Peter Chestna, the North America CISO of Checkmarx, engages with thought leaders from government and industry to illuminate the threats posed by the software supply chain and APIs and the measures they are taking to better defend against attacks. Expect an enlightening event that will address prevalent issues around this crucial topic.
 

Learning Objectives:   

• Identify where APIs are used in your organization’s systems and what applications they connect
• Review the top threats to your organization’s software supply chain
• Identify countermeasures and strategies available to guard against both threats