Beyond the SBOM: Understand and Mitigate Your Attack Surface

It’s been more than two years since president Joe Biden’s cybersecurity executive order underscored the need for software bills of materials and popularized the term SBOM.

But how broadly has the SBOM practice been embraced by the public and private sectors? Have they truly accelerated patch management and response? Where do SBOMs fall short, and what is still left vulnerable to attacks?

In this Techstrong Learning Experience, our experts will discuss how the SBOM is being used, how organizations are acting on the information included in SBOMs and how security leaders can gain an even better understanding of their application security risk and attack surface.

We’ll answer questions like:

• How does your organization use the SBOM today?
• What do you believe the SBOM tells you?
• Where do you believe the SBOM still falls short?
• What do you do with the information included in the SBOM? Do you validate it? Do you
• operationalize it?
• Beyond the SBOM, how else are you better understanding your application risk and attack
• surface?
• Where are the biggest remaining gaps in your risk/attack surface knowledge and defenses?
• How do you hope to address these challenges in 2023?

You’ll learn:

• How organizations are using the SBOM today
• What SBOMs actually tell you and how to validate and operationalize that information
• Where SBOMs still fall short
• Beyond the SBOM, how to better understand your application risk and attack
• surface
• And more!