Name: Stop worrying and love SBOM – What is it? Why? How does it help you manage risk?
Start: 2021-10-13T15:00:00Z
End: 2021-10-13T15:00:39.000Z
Location: BrightTALK
Rating: 4.5

Device Authority enables end to end cyber resilience for connected devices through the discovery, visibility and automated security of large IoT/OT deployments. With device identities outnumbering human identities 82:1 in enterprise environments and as unmanaged devices become a major target for attack, Device Authority’s Discovery Tool and KeyScaler-as-a-Service (KSaaS) platform provide organizations with complete visibility and control of their device identities and vulnerabilities, reducing human error, accelerating incident response, minimizing risk, ensuring complete device and data trust, and enabling trusted AI in any connected environment.​

In this episode, Device Authority's Molly Marks speaks to Jim Walker, General Manager of Service Delivery at Olympus Solutions about the intersection of AI and non-human identities.

The Authority On...AI and Non-human Identities

In today's hyper-connected world, securing IoT and OT devices has never been more urgent. This video demonstrates how Device Authority’s KeyScaler 2025 delivers Zero Trust for machine identities—starting with automated device discovery, and ending with full lifecycle certificate management and compliance.

See how it works:

Discover every connected device in your network

Identify vulnerabilities using real-world threat data

Automatically onboard IoT devices with AI-assisted techniques

Manage certificates based on real-time device posture and risk

Navigate your IoT security estate with our powerful new web interface

Whether you're a manufacturer or operator, KeyScaler gives you the visibility, control, and automation needed to secure every device—at scale.

Learn more: https://deviceauthority.com/products/keysc...

Built for Zero Trust. Ready for what’s next.

#IoTSecurity #CyberResilience #KeyScaler2025 #DeviceAuthority

KeyScaler 2025 in Action From Discovery to Compliance

In this episode of The Authority On…, we’re joined by Grace Cassy — co-founder of CyLon Ventures, board member at Ten Eleven Ventures, and external expert on the UK’s 2025 Strategic Defence Review.

Grace brings a unique perspective at the intersection of cybersecurity investment, policy, and national resilience. Together, we explore how the Strategic Defence Review signals a shift in how the UK approaches security in a hyper-connected world — from protecting Critical National Infrastructure (CNI) to enabling public-private innovation in defence and beyond.

We discuss the growing convergence of cyber and physical threats, the role of startups in securing national capabilities, and what it takes to build trust in a digital-first world. With input from the Device Authority team, this episode bridges strategy with on-the-ground security challenges faced by organisations today.

The Authority On... Strategic Security in a  Connected World:  A Conversation with Grace Cassy

In this 37-minute special, two AI-generated hosts dive into Device Authority’s new 2025 guide: “IoT/OT Visibility and Control – The Importance of Machine Identity Automation for Device Security.”

From the explosion of machine identities to the challenges of AI and the rise of Zero Trust architectures, this podcast covers what every cybersecurity professional needs to know heading into 2025.

Guide to IoT/OT Visibility and Control

In this episode of The Authority On, we delve into the DA Academy, a key initiative from Device Authority. This podcast features insightful discussions with Steve Huehmer (VP, Customer Success) and John Hynds (Director, Customer Success). They explore the purpose and benefits of the Academy, how it empowers professionals in the cybersecurity and IoT space, and its growing impact on bridging knowledge gaps.

Whether you're a seasoned professional or just starting in cybersecurity, this episode provides valuable insights into the Academy's role in shaping the future of the industry.

Want to learn more and join the Academy? Sign up now: https://deviceauthority.com/device-authority-academy/

The Authority On... Introducing DA Academy

KeyScaler Discovery empowers organizations to uncover vulnerabilities, gain full visibility into unmanaged device activity, and address security gaps with actionable insights. Designed for simplicity and effectiveness, this tool provides the clarity and data you need to secure your network.

A Spotlight On The Unknown: Delivering Complete Visibility Of Unmanaged Devices And Their Vulnerabilities

Join industry experts from Microsoft, CyberArk, and Device Authority for an insightful webinar on WP.29 and R155 automotive cybersecurity regulations. As vehicles become increasingly connected, compliance is no longer just a manufacturing concern—it now extends across the entire vehicle lifecycle, including software updates, security monitoring, and end-of-life management.

In this session, Kaivan Karimi (Microsoft), Brian Carpenter (CyberArk), and Paul Lockley (Device Authority) will explore:

The latest WP.29 and R155 compliance requirements for OEMs and suppliers

How SBOMs (Software Bill of Materials) help secure 200M+ lines of vehicle code

Why car manufacturers prefer "out-of-the-box" cybersecurity solutions over fragmented approaches

How industry leaders are collaborating to deliver seamless, integrated automotive security

Stay ahead of evolving regulations and discover best practices for securing automotive IoT ecosystems.

#AutomotiveCybersecurity #IoTSecurity #WP29 #R155 #ConnectedVehicles #SBOM #Compliance

WP29 and R155: Driving Compliance in Automotive

How are IoT, drones, and emerging technologies transforming public safety and emergency response? Join us in this fascinating conversation with David Ihrie, CTO of the Virginia Innovation Partnership Corporation (VIPC), as we explore the integration of IoT in critical infrastructure and public safety.

In this episode, David shares his insights on:

*The evolving role of IoT sensors in emergency response and disaster preparedness
*How drones are revolutionizing first responder efforts
*The pressing cybersecurity challenges facing our critical infrastructure
*The potential (and risks) of quantum computing and AI in safeguarding our communities

From the impact of IoT on real-time data sharing to the future of cyber resilience, this episode is packed with valuable information on the role of innovation in a safer, smarter world. Don’t miss out!

#IoT #PublicSafety #Cybersecurity #TechInnovation #EmergencyResponse

The Authority On... What's the Emergency? Public Safety in a World of IOT and Cybersecurity

Join us as we dive deep into the evolution of IoT security with John Moor from the IoT Security Foundation. In this episode, we explore the critical milestones in IoT security, discuss current challenges and innovations, and uncover what the future holds for IoT technology. Whether you’re an IoT professional, tech enthusiast, or simply curious about cybersecurity, this episode is packed with insights on how we can secure our connected world. Don’t miss out—hit subscribe for more expert insights! 

#IoTSecurity #Cybersecurity #JohnMoor #IoTFoundation #TechPodcast #FutureOfTech

The Authority On... Insights into the Past, Present, and Future with John Moor IoT SF

Join us as we discuss the basics of KSaaS, the key benefits of KSaaS for industries like automotive, medical, and energy and what can we expect from the latest 7.2 upgrade.

The Authority On... KeyScaler-as-a-Service (KSaaS) 7.2

Join James Penny, CTO at Device Authority, as he brings Day 2 of the Device Authority Virtual Summit to a close. Reflect on the insightful discussions surrounding Zero Trust in the era of AI that have unfolded over the past two days. Gain valuable insights into the future of cybersecurity and the role of AI in shaping trust and security paradigms. Don't miss this opportunity to conclude our summit with key takeaways and actionable insights to propel your organization forward in an ever-evolving digital landscape.

Closing Remarks and Future Outlook

This session will discuss the drivers for building situational awareness and context-driven insights applying machine learning and behavioral analytics to OT and ICS networks. Danielle will discuss the instinct to react to alerts and detections, and drill into what works and what doesn’t work for rules based detections and signature recognition in OT/ICS networks. She will also discuss what is and is not built into monitoring tech today vs. what’s coming, including natural language query for monitoring solutions.  This session overall will capture how we rationalize and strategize network monitoring solutions in operation today, discussing the evolution of the technology.

OT Heuristics: Thinking Fast & Thinking Slow in OT

The factory of tomorrow is characterized by interconnected systems and smart technologies that drive efficiency and productivity. However, with increased connectivity comes heightened cybersecurity risks. This session examines the cybersecurity challenges facing the manufacturing industry, from protecting intellectual property and sensitive data to securing industrial control systems and supply chains. Join us as industry leaders discuss strategies for mitigating cyber threats and safeguarding the future of manufacturing.

Guarding the Factory of Tomorrow: Cybersecurity in Manufacturing

The “Post Quantum Event” as it is called will be a significant event affecting many aspects of the modern cybersecurity landscape.  With all the noise in the marketplace, it can be difficult to make sense of what actual steps need to be taken by modern enterprises in the short and medium term to help prepare for this event.   This presentation aims to cut through the noise with facts from a key contributor in ongoing standards work around quantum-safe cryptography to help give some perspective and some concrete steps organizations can start taking now to implement people, process and technology to be better prepared.

PQ and Zero Trust: A new era in Cyber resilience

The intersection of IoT and AI in healthcare promises transformative innovations that improve patient outcomes, enhance medical workflows, and drive operational efficiencies. This session explores the myriad applications of IoT and AI in healthcare, from remote patient monitoring and predictive analytics to personalized treatment and drug discovery. Join us as we uncover the potential of these technologies to revolutionize the delivery of care and advance medical science.

IoT and AI in Healthcare: A Prescription for Innovation

Join Tyler Gannon, Vice President, Product Marketing and Strategic Alliances at Device Authority, as he recaps the highlights from Day 1 and sets the stage for Day 2 of the Device Authority Virtual Summit. Gain valuable insights into the key takeaways from yesterday's discussions on Zero Trust in the era of AI. Get ready to delve deeper into the intersection of security and artificial intelligence as we embark on another day of thought-provoking sessions and industry-leading insights.

Welcome and Recap

As Day 1 of the Device Authority Virtual Summit comes to a close, join Tyler Gannon, Vice President, Product Marketing and Strategic Alliances at Device Authority, for insightful closing remarks. Reflect on today's discussions surrounding Zero Trust in the era of AI and the implications for modern cybersecurity. Prepare for tomorrow's sessions as we continue to explore the intersection of technology and trust.

Day 1 Closing Remarks

During this presentation, James Penney, CTO of Device Authority, will be Presenting the latest upadate to the KeyScaler platform. KeyScaler AI, a new solution focused on enhancing device security and delivering new automated features, now adds an AI/Machine Learning license module to the KeyScaler platform.

KeyScaler AI: The Future of IoT Security

Join this interactive panel session with special guests Julie Roberts from Armored Things and Rob Curtin from Microsoft. The session will be moderated by Khalil Yazdi of Crossroad Innovation Group and include topics such as: 
- New business models and capabilities within IoT
- The importance of device trust for data trust
- Unique challenges for harnessing information from disparate devices
- Looking at IoT initiatives like smart cities, including large venues and university campuses
- Considerations about personal data collection and how it’s used

Panel: Why is Device Trust important for IoT Data?

There are many challenges facing the manufacturing industry. A major hurdle is that enacting design changes in the production line is often difficult and time consuming. Factory layouts need to be more flexible to meet customer expectations of faster delivery and more customized products. This session will focus on how businesses worldwide are leveraging the power of connected/IoT devices to create operational visibility, increase productivity, and improve overall operations within Smart Factories.

The Promise of IoT for Agile Factories of the Future

Learn how our managed service platform, KSaaS, can secure your IoT ecosystem without the burden of infrastructure of dedicated resources. Our KeyScaler-as-a-Service platform is evolving. Discover how KSaaS is the simplest, quickest, and most efficient way to implement industry-leading IoT device security without the initial outlay for complex infrastructure and specialised resources. KSaaS offers the full power of the KeyScaler platform and solutions, simply providing the intuitive interfaces you need to focus on what matters to you - device trust. Plus - a sneak preview of some of our roadmap developments, and how KSaaS can harness the power of Machine Learning with industry-wide device data to make your platform more intelligent, and more secure.

Your Quickest and Safest Route to IoT Device Trust

From fleet to industrial equipment, smart meters, healthcare applications, and more, all types of industries can achieve substantial improvements using eSIM as part of their IoT ecosystem. With eSIM technology, you can leverage embedded connectivity that provides global coverage right out of the box and advanced auto-provisioning capabilities that ensure it’s always on the right network for your service needs.

Join us as we discuss how you can install one SIM, one time – and enjoy coverage wherever it’s needed and connectivity that lasts the entire device lifecycle and take advantage of new IoT SAFE - Chip to Cloud security.

How eSIM Helps to Keep the IoT SAFE

Hear about 3 real customer use cases where significant ROI was delivered by implementing an automated, secure IoT strategy.

How to achieve compelling ROI in real IoT customer use cases

As businesses strive to become more sustainable and environmentally friendly, deployment of Internet of Things (IoT) technologies will increase within industrial and enterprise environments. Automation improvements and Artificial Intelligence (AI) will rely on IoT devices to monitor and report the state of farms, crops, factories, and livestock in real-time. The addition of all these internet-connected devices will create a considerable cybersecurity threat that most organizations are unprepared to handle or do not even know will become an issue.  
 
Investing in technology is step one to ensure cybersecurity resilience, but where should businesses invest first? Indeed, what updates to existing technology platforms are needed to improve organizational resilience? 
 
With the new Infrastructure Bill set to pass in the US Congress, an influx of money will enable organizations to strengthen, upgrade, and future-proof cybersecurity, whilst in Europe, ENISA has published guidelines for securing IoT. In the UK, the National Cyber Security Centre (NCSC) and the National Farmers Union (NFU) recently issued guidelines to help farmers combat cybersecurity in the agriculture sector. Regulations are helpful to create a common language, but often organizations are left with "where do we start" or "I don't know how to spend my budget effectively."  
 
In this webinar, Robert Dobson from Device Authority and Kristin Demoranville from BSI will get together for an informal conversation focusing on the new cybersecurity challenges faced for Industry 4.0, in particular, taking a look at food and agricultural organizations worldwide examining the need for security controls covering people, process and technologies.

Who's Playing with Your Food: Real-world IoT Threats to Food and Agriculture

During this session, speakers from Entrust and Device Authority will outline how to secure your data, comply with regulatory and industry standards, and protect your organization’s reputation using best-in-class approaches for Key Management in the Automotive industry. We'll take a look at a customer, their challenges and how the solutions to overcome them.

Bring Your Own (Connected Car) Key: Security in the Automotive Industry

The IIoT consists of internet-connected machinery and the advanced analytics platforms that process the data they produce. IIoT devices range from tiny environmental sensors to complex industrial robots. While the word “industrial” may call to mind warehouses, shipyards and factory floors, IIoT technologies hold a lot of promise for a diverse range of industries, including agriculture, healthcare, financial services, retail and advertising. During this session we'll take a look at how Industrial IoT is changing, what the latest use cases are and what challenges organisations are facing - with tips for how to solve or avoid them.

The current state of the Industrial IoT (IIoT) and Cybersecurity

Zero day is a flaw in software, hardware or firmware that is unknown to the party or parties responsible for patching or otherwise fixing the flaw. Weakness can reside in the architecture at the device or system level, the implementation, the provisioning, the lifecycle management, the device or system administration. Learn how to prevent zero day attacks with technologies such as AI, utilising anomaly detection in IoT and other techniques.

The role of AI in IoT security for preventing zero day attacks

In this session Trusted Objects and Device Authority will discuss the alternatives for providing Root of Trust (RoT) on devices which don’t have MCUs with TF-M (TrustZone) nor a TPM or Secure Element chip. Alongside this the speakers will be discussing how coupling a software RoT with security automation makes Edge to Cloud possible for large scale IoT, including legacy IoT devices.

How to ensure Trust & Security for MCUs without TF-M, TPM or Secure Element chip

Join this fireside chat with InVMA and Device Authority to learn about the real world challenges facing organisations on their IoT journey today. Find out about real insights and learn about potential solutions to improve your IoT project success and deliver ROI faster.

Challenges in the IoT journey and 5 easy steps to solve them

Smart cities are no longer a concept or futuristic dream. Thanks to Internet of Things (IoT) solutions, many are already active and expanding rapidly. Municipal governments are leveraging cellular and Low Power Wide Area (LPWAN) wireless technologies to connect and improve infrastructure, efficiency, convenience, and quality of life for residents and visitors alike. But what are the key challenges of Smart Cities? That's what we'll look at during this session, and we'll touch upon a critical factor - security.

A snapshot into the unique challenges of Smart Cities and how to secure them

The explosion of IoT devices is dramatically changing the cyber risk landscape — and not necessarily for the better. Many security experts believe that smart devices are creating a wave of vulnerabilities because they often lack strong — or, in some cases, even basic — security features. IoT devices often also lack regular product support, such as updates and patches, making them particularly vulnerable to newly discovered weaknesses.

IoT and Cyber Insurance: why is it important and what are the challenges?

Bringing more and more intelligence close to the manufacturing floor brings new levels of agility and product innovation.  Kubernetes is the operating system for today’s cloud-native generation, and the right fit to bring powerful compute, analytics, and automation right to the factory floor. Extending capabilities once only reserved for the cloud next to assembly line means that identity is critical. Good news: Building in machine identity for your devices at the Edge closest to your production is simpler, faster, easier than ever before with Kubernetes. Learn how Kubernetes and CNCF Sandbox project cert-manager are bringing machine identity that’s shockingly simple and ready to scale.

Kubernetes at the Edge of Manufacturing

The edge of the IoT is where the action is. It includes a wide array of sensors, actuators, and devices—those system end-points that interact with and communicate real-time data from smart products and services.  From a security standpoint, data at the edge can be troublesome, especially when it’s being handled by different devices that might not be as secure as centralized or cloud-based systems. As the number of IoT devices grows, it’s imperative that IT understands the potential security issues and makes sure those systems can be secured.

What is the IoT edge and why is security important?

Securing IoT devices and solutions requires a purpose-built device-centric IAM solution as traditional employee-centric IAM or customer IAM (CIAM) solutions are not capable of addressing IoT-specific challenges.

This interactive session will focus on:
* Key capabilities of IoT IAM platforms to meet the requirements of IoT security
* Understand why IoT IAM is substantially different from Traditional IAM
* Current state of the market / vendors
* Market drivers and expected growth (importance of IoT IAM)

An analyst insight into the current IoT IAM market

The opening session for the virtual IoT Security Summit hosted by Device Authority with special guests throughout the 3 days. We'll provide an introduction to the theme of the event and provide an overview of what can be expected. We'll be joined by special guest, Kevin Bocek, VP Security Strategy & Threat Intelligence at Venafi.

Introduction to the IoT Security Summit: Edge to Enterprise

Device Authority - Edge to Enterprise

President Biden's Executive Order to improve cybersecurity directly relates to the trustworthiness and transparency in ALL digital infrastructure (IT, OT, IoT, IIoT). Anything that runs software is in scope – cloud services, on-prem application servers and connected things. Rogue or malfunctioning software is difficult to spot, and often stems from the lack of transparency in development of commercial software. A one-shot security evaluation or pentest is not enough – proof of security and safety must accompany any software throughout its useful lifespan. The Executive Order calls to equip federal users with a new defense that will deliver trust through transparency: the SBOM. This session will outline what an SBOM is and how it helps organisations to manage risk.

Stop worrying and love SBOM – What is it? Why? How does it help you manage risk?

Cyber Attacks

Cyber Security

IoT IAM

IoT Security

SBOM

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Enterprise applications have become a crucial piece of infrastructure for many businesses. The enterprise applications community on BrightTALK features the latest insights in enterprise application integration, enterprise application architecture and EAS software. Join the community to gain access to thousands of videos and webinars presented by recognized enterprise information systems experts and arm yourself with the knowledge you need to succeed.

Enterprise Applications

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Information Technology

Thousands of healthcare IT professionals compose the health IT community on BrightTALK. Learn alongside them with relevant webinars on healthcare IT compliance, big data in healthcare and IT solutions for healthcare organizations. Join the conversation by asking questions and engaging with other participants during live webinars and organized discussions.

Health IT

Healthcare

Get powerful emerging technology insights from influential experts. Connect with thought leaders and colleagues to get the most up-to-date knowledge on technologies like 3D printing, pervasive robotics, natural interfaces, connected everything and cognitive systems.

Emerging Technologies

Get powerful manufacturing insights from influential experts. Connect with thought leaders and colleagues to get the most up-to-date knowledge on strategies and techniques to accelerate production cycles while increasing efficiencies and improving profitability.

Manufacturing

The research and development community on BrightTALK brings together leading professionals in healthcare, technology and manufacturing to present on current topics in their fields. From big data in healthcare to online forensics training and medical research practices, the community is an exceptional resource for those looking to expand their knowledge. Be part of the conversation by joining the community and participating in interactive live webinars.

Stop worrying and love SBOM – What is it? Why? How does it help you manage risk?

Presented by

About this talk

Device Authority - IoT Security