Are You Sure You’re Doing That Right? A Mock Hearing
summary
A panel frames legal and practical questions about vendor cybersecurity in the software/hardware supply chain, examining whether organizations must require or verify secure development and delivery environments from suppliers. The presenters—judges, military/government counsel, and industry security and legal experts—explore contractual obligations versus ‘trust but verify’ approaches and whether excessive reliance on vendors could create negligence risk.
AI-written summary · about
chapters (8)
- 0:00Start
- 7:29Opening Statement
- 17:10Regression Testing
- 18:37How Do Your Developers Access Their Their Development Platform
- 32:10How Does this Authentication System Work How Do People Authenticate to the System
- 32:51The Development Process
- 34:30What Factors Do You Use for Multi-Factor Authentication
- 36:25Did Shibboleth Meet Its Contractual Obligations
related talks
50mRunning in the Shadow: Perspectives on Securing the Software Supply Chain
01h 00mIt's Been a Privilege to Serve You–a Mock Hearing
44mHardware Security By Design
48mCXO PANEL: Security Certifications for IoT Devices
54mSecuring the Digital Supply Chain: What we should do for Supply Chain Security in DevSecOps?
27mSecurity: The Thing That Everyone...
42mPanel: The Right To Secure; What, Who, How And Why!
38mChallenge Accepted: 3 Experts, 3 Big Ideas on Supply Chain Security