Empower Your Developers: How Open Source Dependencies Risk Management Can Unlock Innovation

As security practitioners, we face the challenge of driving innovation whilst needing to balance security risks. This talk explores how to overcome this challenge by managing Open Source dependencies more effectively, automating patching, and establishing better security policies and processes to help teams harness the power of Open Source more securely.


Speaker

Celine Pypaert

Vulnerability Manager @Johnson Matthey

Vulnerability Manager at Johnson Matthey, Women in CyberSecurity UK volunteer, book contributor, ex-Microsoft

Read more

Date

Tuesday Apr 8 / 11:45AM BST ( 50 minutes )

Location

Mountbatten (6th Fl.)

Topics

open source supply chain risk vulnerability management software devellopment

Share

From the same track

Session security

Securing AI Copilots: Strategies and Practices for Protecting Data

Tuesday Apr 8 / 03:55PM BST

The data behind AI copilots is not only their most critical asset but also a key strategic consideration for enterprises and SMBs alike.

Speaker image - Andra Lezza

Andra Lezza

Principal Application Security Specialist @Sage, 10+ Years of Experience Building AppSec Programs, OWASP London Chapter Leader

Session software supply chain

Trust No One: Securing the Modern Software Supply Chain with Zero Trust

Tuesday Apr 8 / 01:35PM BST

Can you truly trust your software supply chain? As cloud-native software development surges, threat actors increasingly target the supply chain, exploiting vulnerabilities in CI/CD pipelines, dependencies, and container images.

Speaker image - Emma Yuan Fang

Emma Yuan Fang

Senior Cloud Security Architect @EPAM, DevSecOps, Cloud Security Advocate, Strategist and Public Speaker, Ex-Microsoft, CISSP

Session

Secure by Design: Building Security into Engineering Workflows and Teams

Tuesday Apr 8 / 02:45PM BST

Security doesn't have to be a blocker- it can be an enabler. In this session, we’ll explore how to seamlessly integrate secure development practices into engineering workflows while fostering a culture of collaboration and shared ownership.

Speaker image - Stefania Chaplin

Stefania Chaplin

Founder & CEO @DevStefOps, Previously Solutions Architect @GitLab, AWS Certified Security - Speciality

Session supply chain security

Supply Chain Security and the Real World: Lessons From Incidents

Tuesday Apr 8 / 10:35AM BST

Supply chain security is becoming more and more important, but it is often talked about in abstract and general terms that do little to help the average organization.

Speaker image - Adrian Mouat

Adrian Mouat

Technical Community Advocate @Chainguard, Complainer of Supply Chain Security & Author of "Using Docker"

Session

Unconference: Resilient Engineering Practices for Security Against Modern Threats

Tuesday Apr 8 / 05:05PM BST