Software Supply Chain Security: Securing the End-to-End Supply Chain for Software, Firmware, and Hardware

Software cybersecurity is essential for companies to protect their revenue and business recovery. This book provides practical controls to incorporate into the end-to-end software supply chain, including IT, development, operations, manufacturing, and procurement.

Format: Paperback / softback
Length: 200 pages
Publication date: 16 February 2024
Publisher: O'Reilly Media

Software plays a crucial role in our daily lives, businesses, and organizations, facilitating various functionalities and processes. However, the impact of a single software cybersecurity vulnerability can be devastating, resulting in the complete shutdown of companies and significant revenue losses. The field of software supply chain security, which encompasses the secure development and deployment of software, goes beyond the traditional software development process. This practical book aims to provide a comprehensive understanding of security risks and offer practical controls that can be integrated into an organization's end-to-end software supply chain.

Author Cassie Crossley emphasizes the importance of involving everyone in the supply chain, including IT, development, operations, manufacturing, and procurement, in improving the security posture of software, firmware, and hardware. By recognizing the cybersecurity risks in each part of the supply chain, the book helps readers identify the appropriate cybersecurity frameworks and resources that can enhance security. It also outlines the roles and responsibilities of individuals within the supply chain, enabling them to design initiatives and controls tailored to their specific areas.

Furthermore, the book delves into evaluating third-party risk in the supply chain, recognizing the potential threats posed by external partners and suppliers. By implementing robust risk management practices, organizations can mitigate the risks associated with third-party interactions and ensure the security of their software supply chain.

In conclusion, this book is a valuable resource for anyone involved in software development, supply chain management, or cybersecurity. It provides a comprehensive guide to identifying and mitigating security risks, promoting a secure software supply chain, and ensuring the continued reliability and integrity of software systems. By embracing the principles outlined in this book, organizations can safeguard their assets, protect their customers, and maintain their competitive edge in the ever-evolving digital landscape.

Weight: 422g
Dimension: 175 x 234 x 14 (mm)
ISBN-13: 9781098133702