39 min listen
Impact of New US National Cybersecurity Strategy on Organizations Building With OSS - Donald Fischer - ESW #312
Impact of New US National Cybersecurity Strategy on Organizations Building With OSS - Donald Fischer - ESW #312
ratings:
Length:
45 minutes
Released:
Apr 7, 2023
Format:
Podcast episode
Description
Overall increase in government regulations. EU as well. Shift in liability from consumers to organizations.How to take advantage of safe harbor protections and reduce organizational risk and liability. NIST SSD Framework - how do you understand the security practices of the open source packages you use in your applications and ensure they are following the NIST practices (so you can take full advantage of safe harbor protections and reduce potential liability). Creating a network of open source maintainers, documenting and attesting to their security practices, is a solution. Work with the maintainers to be able to provide documentation. How to get more involved with development in open source security. What is the mechanism? Segment Resources: https://tidelift.com/government-open-source-cybersecurity-resources https://blog.tidelift.com/webinar-how-the-nist-secure-software-development-framework-impacts-open-source-software https://blog.tidelift.com/webinar-recap-what-the-new-u.s.-national-cybersecurity-strategy-means-for-open-source-software https://blog.tidelift.com/tidelift-advisory-impact-of-new-u.s.-national-cybersecurity-strategy-on-organizations-building-apps-with-open-source-software Visit https://www.securityweekly.com/esw for all the latest episodes! Show Notes: https://securityweekly.com/esw312
Released:
Apr 7, 2023
Format:
Podcast episode
Titles in the series (100)
Enterprise Security Weekly #6 - IDS/IPS: This week is, well, rough, ServiceNow buys threat intelligence company, memory scanning in the hypervisor, and next-generation network segmentation and NAC, and John and I discuss the evolution of IDS and IPS! Full Show Notes Here:... by Enterprise Security Weekly (Video)