John Willis – Software Supply Chain: The Missing Links

There has been an increased focus on security and software delivery in the past few years. Most of the attention has been focused on vulnerabilities in software libraries and dependencies. Despite its necessity, this narrow focus is insufficient. As a result, many other attack vectors in the software supply chain are still at risk. As part of this presentation, we will discuss how a robust automated governance model based on Modern Governance considers these additional risks. The primary focus of this session will be on securing API development, workflow and operations.