Software Supply Chain Concerns for DevSecOps Programs

Software Engineering Institute (SEI) Webcast Series

Content provided by Carnegie Mellon University Software Engineering Institute and SEI Members of Technical Staff. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by Carnegie Mellon University Software Engineering Institute and SEI Members of Technical Staff or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://player.fm/legal.

3+ y ago 1:01:06

MP4•Episode home

Managing third-party relationships, such as pubic cloud service providers, requires a set of skills often unfamiliar to many technologists. These relationships are constructed on a foundation of verifiable trust. This requires managing the cybersecurity performance of third parties via contractual mechanisms rather than the traditional line-of-sight practices used internal to an organization. Chief among these mechanisms are service-level agreements (SLAs). Cybersecurity SLAs are vital to the success of third-party relationships and a core component of sound governance.

What Attendees Will Learn

• How to design and implement meaningful SLAs

• How best to use SLAs to drive third-party cybersecurity performance

• The limits of SLAs as a third-party risk management tool

151 episodes

#Tech #Cybersecurity #Securecoding #Softwarearchitecture #Softwaredevelopment #Softwareengineering #Carnegie Mellon University Software Engineering Institute #SEI Members of Technical Staff #Video #Podcasting Education