Good Enough: Practical Zero Trust Posture in The Software Supply Chain

We all want to have the best security posture possible, especially when it comes to our mission-critical applications and the software we make available as part of the software supply chain. Every security team dreams of fully implementing Zero Trust as the standard across the whole of the organization and having flawless defenses. In reality, though, security is a never-ending journey, as the landscape constantly shifts at an ever-accelerating rate. Defending the perimeter used to be the goal, but in the ultra-interconnected world of services, cloud platforms, and open-source dependencies, we need to rethink how we defend ourselves and our customers. We need to stop unrealistically striving for perfection and get back to basics to make sure we are guarding against the most likely, most common, and most costly threats that continue to emerge. In this webinar we will cover: - Understanding the threats throughout the Software Supply Chain - The benefits and realities of implementing Zero Trust - Thinking through trust, attestation, and scanning - Finding the right balance of time and effort for security ROI - Thinking past compliance and defending against the most likely scenarios