Software Supply Chain Security

Discuss remedial actions with a shift from implicit trust to continuous validation

Modern attacks increasingly target the software supply chain: open‑source components, third‑party libraries, and CI/CD pipelines are all potential entry points for compromise. A single vulnerable dependency or tampered build step can silently infect many downstream organisations before anyone notices.

This session explains how these attacks happen and what practical steps teams can take to reduce risk, including securing dependencies, hardening build pipelines, and using SBOMs and code‑signing.

We’ll focus on moving from implicit trust in code and tools to continuous validation of every component and change throughout the development lifecycle.