Good Enough: Practical Zero Trust Posture in The Software Supply Chain

We all want to have the best security posture possible, especially when it comes to our mission-critical applications. This is also true for any software we publish that is used in the software supply chain. Every security team dreams of fully implementing Zero Trust as the standard across the whole of the organization and having flawless defenses. In reality, though, security is a never-ending journey, as the landscape constantly shifts at an ever-accelerating rate. Defending the perimeter used to be the goal, but in the ultra-interconnected world of services, cloud platforms, and open-source dependencies, we need to rethink how we defend ourselves and our customers. We need to stop unrealistically striving for perfection and get back to basics to make sure we are guarding against the most likely, most common, and most costly threats that continue to emerge. In this webinar, we will cover: Understanding the threats throughout the Software Supply Chain The benefits and realities of implementing Zero Trust Thinking through trust, attestation, and scanning Finding the right balance of time and effort for security ROI Thinking past compliance and defending against the most likely scenarios Join Chris Lindsey, Application Security Evangelist at Mend.io, and Dwayne McDaniel, Sr. Developer Advocate at GitGuardian, for an hour of conversation and learning.