DiscoverFuture of Application SecurityEP 41 — SAP’s Helen Oakley on Protecting Human Well-Being by Securing Software Supply Chains
EP 41 — SAP’s Helen Oakley on Protecting Human Well-Being by Securing Software Supply Chains

EP 41 — SAP’s Helen Oakley on Protecting Human Well-Being by Securing Software Supply Chains

Update: 2023-07-26
Share

Description

In this episode of the Future of Application Security, Harshil speaks with Helen Oakley, Lead Architect for Software Supply Chain Security at SAP, which develops enterprise software for business operations. They discuss the need for software supply chain security, especially considering how much of software is open source today, and what the current state of adoption is across industries. They also discuss how you can optimize SBOMs and the misconceptions around them, where organizations can start implementing software supply chain security, and why it's needed to protect both infrastructure and human life.


Topics discussed:


  • What software supply chain security is, and the different considerations — like open source components — that make it a priority for organizations today.

  • The current state of adoption for software supply chain security, the challenges to adoption, and which industries are on the forefront while others lag behind.

  • How software supply chain security and SBOMs will evolve, especially considering the need for safety around digitally-connected devices that can impact human well-being.

  • Some of the misconceptions around what SBOMs offer, and what more has to be done in addition to SBOM implementation to make supply chains more secure.

  • Advice for organizations looking to get started on or ramp up their software supply chain security approach, which includes improving SBOM quality and automation.

  • How to be prepared to receive and consume SBOMs from vendors, and what tools to use to analyze that data.

  • What types of benefits and risks AI will pose for software supply chain security in the future, especially around transparency.

Comments 
Top Podcasts
The Best New Comedy Podcast Right Now – June 2024The Best News Podcast Right Now – June 2024The Best New Business Podcast Right Now – June 2024The Best New Sports Podcast Right Now – June 2024The Best New True Crime Podcast Right Now – June 2024The Best New Joe Rogan Experience Podcast Right Now – June 20The Best New Dan Bongino Show Podcast Right Now – June 20The Best New Mark Levin Podcast – June 2024
In Channel
EP 60 - Appian’s Abdullah Munawar on Enhancing Product Security Amid Evolving Development Trends

EP 60 - Appian’s Abdullah Munawar on Enhancing Product Security Amid Evolving Development Trends

2024-05-2221:05

EP 59 - Nat Mokry on Advancing Application Security in the Gaming Industry

EP 59 - Nat Mokry on Advancing Application Security in the Gaming Industry

2024-04-2426:55

EP 58 — Asana's Felix Matenaar on Building Resilient Security Practices for the Future

EP 58 — Asana's Felix Matenaar on Building Resilient Security Practices for the Future

2024-04-1032:45

EP 57 — Clari's Steve Lukose on Using SLAs as Benchmarks for Businesses

EP 57 — Clari's Steve Lukose on Using SLAs as Benchmarks for Businesses

2024-03-2727:05

EP 56 — Aruneesh Salhotra on Why Security is Everyone’s Job

EP 56 — Aruneesh Salhotra on Why Security is Everyone’s Job

2024-02-2824:49

EP 55 — BlackBerry's Christine Gadsby on What's Driving Software Supplier Transparency and Accountability

EP 55 — BlackBerry's Christine Gadsby on What's Driving Software Supplier Transparency and Accountability

2024-02-1426:21

EP 54 — LPL Financial's Chad Girouard on Improving Application Security Through Better Tools and Relationships

EP 54 — LPL Financial's Chad Girouard on Improving Application Security Through Better Tools and Relationships

2024-01-3123:43

EP 53 — ReversingLabs's Dave Ferguson on Securing Your Software Supply Chains

EP 53 — ReversingLabs's Dave Ferguson on Securing Your Software Supply Chains

2024-01-1724:24

EP 52 — Gen’s Curtis Koenig on Speaking the Language of Why Security Matters

EP 52 — Gen’s Curtis Koenig on Speaking the Language of Why Security Matters

2023-12-1327:28

EP 51 — Ping Identity’s Arthur Loris on How to Tell Better Stories About Your Product Security Success

EP 51 — Ping Identity’s Arthur Loris on How to Tell Better Stories About Your Product Security Success

2023-11-2927:10

EP 50 — DryRun Security’s James Wickett on Aligning Incentives and Speaking the Same Language with Developers and Security

EP 50 — DryRun Security’s James Wickett on Aligning Incentives and Speaking the Same Language with Developers and Security

2023-11-1531:08

EP 49 — Semgrep’s Colleen Dai on Building Security Strategies and Relationships with Other Teams

EP 49 — Semgrep’s Colleen Dai on Building Security Strategies and Relationships with Other Teams

2023-11-0220:14

EP 48 — Chaotic Good’s Johnathan Kuskos on Testing for Functionality, Priorities, and Better Incident Response

EP 48 — Chaotic Good’s Johnathan Kuskos on Testing for Functionality, Priorities, and Better Incident Response

2023-10-2631:10

EP 47 — Manicode Security’s Jim Manico on Addressing OWASP Top Ten Issues Through Better Security and Developer Partnerships

EP 47 — Manicode Security’s Jim Manico on Addressing OWASP Top Ten Issues Through Better Security and Developer Partnerships

2023-10-1826:38

EP 46 — TuSimple’s Madjid Nakhjiri on the Evolving Need for Automotive Cybersecurity

EP 46 — TuSimple’s Madjid Nakhjiri on the Evolving Need for Automotive Cybersecurity

2023-09-2024:03

EP 45 — Toast’s David Kosorok on Leading Application Security with Collaboration, Empathy, and Good Data

EP 45 — Toast’s David Kosorok on Leading Application Security with Collaboration, Empathy, and Good Data

2023-09-1433:55

EP 44 — Workrise’s Tim Kelly on How to Build a Data-Driven Application Security Program

EP 44 — Workrise’s Tim Kelly on How to Build a Data-Driven Application Security Program

2023-08-2824:06

EP 43 — Avalara’s Derek Samford on Building a Security Culture with Data, Collaboration, Education, and Empathy

EP 43 — Avalara’s Derek Samford on Building a Security Culture with Data, Collaboration, Education, and Empathy

2023-08-1635:56

EP 42 — Snowflake’s Jacob Salassi on the Science of Product Security

EP 42 — Snowflake’s Jacob Salassi on the Science of Product Security

2023-08-0238:00

EP 41 — SAP’s Helen Oakley on Protecting Human Well-Being by Securing Software Supply Chains

EP 41 — SAP’s Helen Oakley on Protecting Human Well-Being by Securing Software Supply Chains

2023-07-2626:07

loading
Google Play
Download from Google Play
Castbox
Download from App Store
usUnited States
00:00
00:00
x

0.5x

0.8x

1.0x

1.25x

1.5x

2.0x

3.0x

Sleep Timer

Off

End of Episode

5 Minutes

10 Minutes

15 Minutes

30 Minutes

45 Minutes

60 Minutes

120 Minutes

EP 41 — SAP’s Helen Oakley on Protecting Human Well-Being by Securing Software Supply Chains

EP 41 — SAP’s Helen Oakley on Protecting Human Well-Being by Securing Software Supply Chains

Tromzo