Paul McCarty's guest appearances

Paul McCarty

The Application Security Podcast

ITSPmagazine

The Security Collective Podcast

Adams Ward (Spokane Valley)

Julie Smith

Alison Levine

Sam Houston

Robert Lee

Andrew Smith

Robin Smith

Kathleen Smith

Omar Khawaja

Adam Levin

David Cross

Stephanie Lucas

Jeffrey Smith

Joel Makower

Caleb Barlow

Brian Kelly

OwlTail

"Visualizing the Software Supply Chain" is a project which aims to kick off a discussion about the scope and breadth of the software supply chain.Paul McCarty emphasizes the importance of understanding what's in the software supply chain to secure it effectively. He uses the burrito analogy, stating that you can't decide if you want to eat it if you don't know what's in it. We discuss the nuances around the Software Bill of Materials (SBOM) and the importance of understanding the differences between various SBOMs, especially for companies that deploy frequently.The conversation also covers third-party components, such as APIs, SaaS solutions, payment gateways, and identity providers, which are part of the software supply chain. Paul gives the example of Stripe, a payment platform that includes software components and SaaS.Paul's project helps people understand the different threats associated with each category in the software supply chain. The episode concludes with a call to action for organizations to prioritize understanding their software supply chain and leveraging automation as much as possible.Gain valuable insights into securing the software supply chain and consider guidance on actionable steps organizations can take to enhance their security.Four key takeaways from the episode:Understanding the Software Supply Chain: Paul McCarty emphasizes the importance of understanding the scope and breadth of the software supply chain. He suggests you can't secure or have a valuable conversation about the software supply chain if you don't know what's in it.The Role of Third-Party Components:  Third-party components in the software supply chain are crucial. These can include APIs, SaaS solutions, payment gateways, and identity providers. Paul uses Stripe as an example to illustrate this point.The Nuances of the Software Bill of Materials (SBOM): SBOM has nuance. We highlight the importance of understanding the differences between various SBOMs, especially for companies that deploy frequently.Threat Thinking in the Software Supply Chain: We appreciate the depth of threat thinking in Paul's project. This approach helps people understand the different threats associated with each category in the software supply chain.Links:https://github.com/SecureStackCo/visualizing-software-supply-chainhttps://github.com/6mile/DevSecOps-PlaybookFOLLOW OUR SOCIAL MEDIA: ➜Twitter: @AppSecPodcast➜LinkedIn: The Application Security Podcast➜YouTube: https://www.youtube.com/@ApplicationSecurityPodcast Thanks for Listening! ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

"Visualizing the Software Supply Chain" is a project which aims to kick off a discussion about the scope and breadth of the software supply chain.Paul McCarty emphasizes the importance of understanding what's in the software supply chain to secure it effectively. He uses the burrito analogy, stating that you can't decide if you want to eat it if you don't know what's in it. We discuss the nuances around the Software Bill of Materials (SBOM) and the importance of understanding the differences between various SBOMs, especially for companies that deploy frequently.The conversation also covers third-party components, such as APIs, SaaS solutions, payment gateways, and identity providers, which are part of the software supply chain. Paul gives the example of Stripe, a payment platform that includes software components and SaaS.Paul's project helps people understand the different threats associated with each category in the software supply chain. The episode concludes with a call to action for organizations to prioritize understanding their software supply chain and leveraging automation as much as possible.Gain valuable insights into securing the software supply chain and consider guidance on actionable steps organizations can take to enhance their security. Four key takeaways from the episode:<ol><li>Understanding the Software Supply Chain: Paul McCarty emphasizes the importance of understanding the scope and breadth of the software supply chain. He suggests you can't secure or have a valuable conversation about the software supply chain if you don't know what's in it.</li><li>The Role of Third-Party Components:  Third-party components in the software supply chain are crucial. These can include APIs, SaaS solutions, payment gateways, and identity providers. Paul uses Stripe as an example to illustrate this point.</li><li>The Nuances of the Software Bill of Materials (SBOM): SBOM has nuance. We highlight the importance of understanding the differences between various SBOMs, especially for companies that deploy frequently.</li><li>Threat Thinking in the Software Supply Chain: We appreciate the depth of threat thinking in Paul's project. This approach helps people understand the different threats associated with each category in the software supply chain.</li></ol>Links:<ul><li><a href="https://github.com/SecureStackCo/visualizing-software-supply-chain" rel="nofollow" target="_blank">https://github.com/SecureStackCo/visualizing-software-supply-chain</a></li><li><a href="https://github.com/6mile/DevSecOps-Playbook" rel="nofollow" target="_blank">https://github.com/6mile/DevSecOps-Playbook</a></li></ul>FOLLOW OUR SOCIAL MEDIA: ➜Twitter: <a href="https://twitter.com/AppSecPodcast" rel="nofollow" target="_blank">@AppSecPodcast</a> ➜LinkedIn:<a href="https://www.linkedin.com/showcase/83990241" rel="nofollow" target="_blank"> The Application Security Podcast</a> ➜YouTube: <a href="https://www.youtube.com/channel/UCfrTGqjSsFCQW4k6TueuY-A" rel="nofollow" target="_blank">https://www.youtube.com/@ApplicationSecurityPodcast</a> Thanks for Listening! ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Paul McCarty -- The Burrito Analogy of the Software Supply Chain

E36 Paul McCarty

Guy Givoni

This contains promotional content. Learn more.When your prospects validate your minimum viable product (MVP), you know you are on the right trackWe were fortunate to meet Guy Givoni and Paul McCarty during their RSA Conference LaunchPad event in Singapore. They’ve been busy riding the wave of success following that event, and we caught up with them in San Francisco during RSA Conference 2020 to get an update from them.These are some of the things we discussed:Securing your cloud stack is different than securing your bare metal stack; migrating to the cloud doesn’t mean your security policies and controls automatically move overCloud migrations and cloud deployments look different for different types of companies, various sizes of companies, and different tech stacksWhat it means to transition beyond moving computers to the cloud to a world where server-less architectures and containers are a critical part of the equationThe importance of a secure standard operating environmentAre you ready to learn more? Good!Have a listen to their story.Guest(s)Guy Givoni | Paul McCartyResourcesLearn more about their company and their offering: https://itspm.ag/scstitspdirAre you interested in telling your story?https://www.itspmagazine.com/telling-your-story

This contains promotional content. <a href="https://www.itspmagazine.com/their-infosec-story" rel="nofollow" target="_blank">Learn more</a>.When your prospects validate your minimum viable product (MVP), you know you are on the right trackWe were fortunate to meet Guy Givoni and Paul McCarty during their RSA Conference LaunchPad event in Singapore. They’ve been busy riding the wave of success following that event, and we caught up with them in San Francisco during RSA Conference 2020 to get an update from them.These are some of the things we discussed:<ul><li>Securing your cloud stack is different than securing your bare metal stack; migrating to the cloud doesn’t mean your security policies and controls automatically move over</li><li>Cloud migrations and cloud deployments look different for different types of companies, various sizes of companies, and different tech stacks</li><li>What it means to transition beyond moving computers to the cloud to a world where server-less architectures and containers are a critical part of the equation</li><li>The importance of a secure standard operating environment</li></ul>Are you ready to learn more? Good!Have a listen to their story. Guest(s) Guy Givoni | Paul McCartyResources Learn more about their company and their offering: <a href="https://itspm.ag/scstitspdir" rel="nofollow" target="_blank">https://itspm.ag/scstitspdir</a>Are you interested in telling your story? <a href="https://www.itspmagazine.com/telling-your-story" rel="nofollow" target="_blank">https://www.itspmagazine.com/telling-your-story</a>

Meet SecureStack | With Guy Givoni And Paul McCarty | A SecureStack Story From RSA Conference 2020