Agile software development environments benefit from shared development platforms and open-source software. Almost all organizations use technologies such as containers, and frameworks such as Node.js or those for Python. That allows organizations to use pre-built software templates and add their own custom code, speeding development. But that also raises the risks of attacks and vulnerabilities seeded into those software supply chains, says Chet Wisniewski of Sophos, who describes steps that organizations can take to mitigate those risks.
In this 8-minute interview, Wisniewski discusses:
- Why supply chain risk has increased in recent years;
- How to evaluate the risk a vendor may bring to your environment;
- What are the most important steps to take to manage supply chain risk.