ConversingLabs highlights: RSA Conference spotlights software supply chain, critical infrastructure risk

We wrote about some of the interesting and must-see talks at this year’s show. We also had the opportunity to sit down with some RSA speakers to hear first hand about their research and insights. We’re highlighting those conversations in three new episodes of our ConversingLabs podcast series that we’re releasing now (thereby allowing you to “binge” Netflix-style on ConversingLabs.)

Here are the ConversingLabs Café-edition episodes from this year’s RSA Conference:

Episode 6: Robert Martin of MITRE on Supply Chain System of Trust

Robert Martin is a Senior Principal Engineer at MITRE and an expert on supply chain security. He’s also one of the principal creators of MITRE’s supply chain System of Trust (sot.mitre.org), which provides a framework for supply chain security risk assessments that is customizable, evidence-based, scalable and repeatable. Once implemented, the SoT will give organizations within the supply chain confidence in each other as well as different service offerings and supplies.

In this conversation, Robert and I talk about COVID has highlighted supply chain risks - whether its availability, counterfeit products or - of course - cyber risk, he said. But solving supply chain problems is not simply a job for the IT group, he tells me. Instead, it is something that needs to be driven from the very top echelons of an organization. That’s where the System of Trust comes in. It promotes transparency within organizations, allowing both leaders and developers to see all of the players in the supply chain and identify areas of risk.