Supply Chain Security Courses and Certifications

In this session, Ed Amoroso covers 5 areas of focus to understand and reduce supply chain risks; review processes, inspect hardware/software, specify vendor requirements, monitor for vendor issues, and proxy comms to unknown sources.

• Cybrary
• On-Demand
• Paid Course

RSA Conference

Supply Chain Security - A New Kind of Halting Problem

2 reviews

Explore modern supply chain security challenges, including hardware and software compromises, adversary motivations, and recent initiatives to address malicious supply chain threats.

• YouTube
• 59 minutes
• On-Demand
• Free Video

Zero-Trust Supply Chain Security with Sigstore, TektonCD and SPIFFE

Explore cutting-edge tools for enhancing software supply chain security, focusing on Sigstore, TektonCD, and SPIFFE implementations in zero-trust environments.

• YouTube
• 50 minutes
• On-Demand
• Free Video

Kubesimplify

Supply Chain Security - The First Steps

Explore supply chain security essentials, including zero trust, SBOMs, and sigstore. Learn to generate and utilize SBOMs to enhance software development security and meet compliance requirements.

• YouTube
• 20 minutes
• On-Demand
• Free Video

Enforcing Supply Chain Security and Simplifying Compliance Audit for ArgoCD Deployments

Explore techniques for securing supply chains and simplifying compliance audits in ArgoCD deployments using open-source tools like Guac, Sigstore, and in-toto.

• YouTube
• 20 minutes
• On-Demand
• Free Video

Open Source Supply Chain Security - Are Containers the Biggest Blind Spot?

Experts discuss open source supply chain security, focusing on container vulnerabilities, SBOMs, and best practices for managing security in modern engineering toolchains.

• YouTube
• 40 minutes
• On-Demand
• Free Video

RSA Conference

Supply Chain Security - Part 1

Explore best practices for establishing trust across supply chains and gain insights on shifting from technology inspection to relationship-based trust in an era of increased third-party dependencies.

• YouTube
• 1 hour 24 minutes
• On-Demand
• Free Video

RSA Conference

RSAC 365 Virtual Seminar - Supply Chain Security

Explore open-source supply chain threats, defense frameworks, and incident response strategies. Learn to track attackers, protect your organization, and shift thinking on supply chain security from experts in the field.

• YouTube
• 1 hour 59 minutes
• On-Demand
• Free Video

A Different Kind of S3 - First Line Security of the Supply Chain

Explore three core areas for securing the software supply chain: Software Bill of Materials (SBOM), Signing, and Slimming. Learn practical methods to enhance first-line security controls and minimize attack surfaces.

• YouTube
• 18 minutes
• On-Demand
• Free Video

A Different Kind of S3 - First Line Security of the Supply Chain

Explore innovative approaches to supply chain security, focusing on first-line defense strategies and cutting-edge solutions for robust protection against emerging threats.

• YouTube
• 18 minutes
• On-Demand
• Free Video

Supply Chain Security, SBOMs and OSPOs: An Ecosystem and Compliance Update

Explore cybersecurity, regulatory compliance, and software supply chain integrity. Learn about SBOMs, the Open Source Security Foundation, and the role of OSPOs in enhancing security.

• YouTube
• 34 minutes
• On-Demand
• Free Video

Supply Chain Security: From Infrastructure to Application, Code to Cloud

Explore best practices for securing the entire software supply chain, from infrastructure to application, covering code, cloud, dependencies, and deployment.

• YouTube
• 50 minutes
• On-Demand
• Free Video

OWASP Foundation

Supply Chain Security with Dependency Track

Explore supply chain security using Dependency Track with experts Anandan, Bhargava, and Duster. Learn strategies to mitigate risks and enhance software security in this informative session.

• YouTube
• 54 minutes
• On-Demand
• Free Video

Making Sense of Security Supply Chain - An Overview for Beginners

Explore supply chain security fundamentals, tools like Fulcio, Rekor, and cosign, and their integration in this beginner-friendly overview of the rapidly evolving landscape.

• YouTube
• 24 minutes
• On-Demand
• Free Video

Securing the Supply Chain with Witness - A Framework for Supply Chain Security

Explore Witness, an open-source framework for supply chain security, its trust model, and implementation in CI pipelines. Learn about attestation collections, policy enforcement, and integration with cloud-native tools.

• YouTube
• 23 minutes
• On-Demand
• Free Video