Tom Alrich's guest appearances

Tom Alrich

Unsolicited Response

@BEERISAC: OT/ICS Security Podcast Playlist

Left to Our Own Devices

OwlTail

Tom Alrich is a well-known independent consultant and blogger about supply chain cybersecurity and software bills of material, for electric power and other industries.We sat down with him to learn from his vast experience about supply chain security, SBOMs, VEXs, and how they all tie together.

Tom Alrich is a well-known independent consultant and blogger about supply chain cybersecurity and software bills of material, for electric power and other industries.We sat down with him to learn from his vast experience about supply chain security, SBOMs, VEXs, and how they all tie together.

Tom Alrich: VEXs and Supply Chain Cybersecurity

Podcast: Unsolicited Response (LS 32 · TOP 5% what is this?)Episode: Tom Alrich On All Things SBOMPub date: 2022-02-09Tom Alrich dives deep on the items he works and writes about. For a long time it was NERC CIP, and he recently added SBOMs to his repertoire. We go deep and I think the business model portion may be the best and most accessible part of the episode. 1:21 The 2 main SBOM formats. There differences and what will win. 12:30 VEX ... identifying what vulnerabilities in the SBOM are exploitable 24:00 What EO 14028 will require the USG to do with SBOMs in August 34:00 Who and how SBOMs will be provided and used. Business models. Links Tom Alrich's Blog  Tom's Who Should Be Responsible article Subscribe to Dale's ICS Security - Friday News &amp; NotesThe podcast and artwork embedded on this page are from Dale Peterson: ICS Security Catalyst and S4 Conference Chair, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: <a href="https://www.listennotes.com/podcasts/unsolicited-response-dale-peterson-ics-6E91QCvGOcU/" rel="nofollow" target="_blank">Unsolicited Response</a> (LS 32 · TOP 5% <a href="https://www.listennotes.com/listen-score/" rel="nofollow" target="_blank">what is this?</a>) Episode: <a href="https://www.listennotes.com/e/e40cab2c78f349cd966fa6bcfa58b378/" rel="nofollow" target="_blank">Tom Alrich On All Things SBOM</a> Pub date: 2022-02-09 Tom Alrich dives deep on the items he works and writes about. For a long time it was NERC CIP, and he recently added SBOMs to his repertoire. We go deep and I think the business model portion may be the best and most accessible part of the episode. 1:21 The 2 main SBOM formats. There differences and what will win. 12:30 VEX ... identifying what vulnerabilities in the SBOM are exploitable 24:00 What EO 14028 will require the USG to do with SBOMs in August 34:00 Who and how SBOMs will be provided and used. Business models. Links <a href="https://tomalrichblog.blogspot.com" rel="nofollow" target="_blank">Tom Alrich's Blog</a> <a href="https://tomalrichblog.blogspot.com/2021/12/who-should-be-responsible-for-component.html" rel="nofollow" target="_blank"> Tom's Who Should Be Responsible article</a> <a href="https://friday.dale-peterson.com/signup/" rel="nofollow" target="_blank">Subscribe to Dale's ICS Security - Friday News &amp; Notes</a>The podcast and artwork embedded on this page are from Dale Peterson: ICS Security Catalyst and S4 Conference Chair, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Tom Alrich On All Things SBOM

Tom Alrich dives deep on the items he works and writes about. For a long time it was NERC CIP, and he recently added SBOMs to his repertoire. We go deep and I think the business model portion may be the best and most accessible part of the episode. 1:21 The 2 main SBOM formats. There differences and what will win. 12:30 VEX ... identifying what vulnerabilities in the SBOM are exploitable 24:00 What EO 14028 will require the USG to do with SBOMs in August 34:00 Who and how SBOMs will be provided and used. Business models. Links Tom Alrich's Blog  Tom's Who Should Be Responsible article Subscribe to Dale's ICS Security - Friday News &amp; Notes

Tom Alrich dives deep on the items he works and writes about. For a long time it was NERC CIP, and he recently added SBOMs to his repertoire. We go deep and I think the business model portion may be the best and most accessible part of the episode. 1:21 The 2 main SBOM formats. There differences and what will win. 12:30 VEX ... identifying what vulnerabilities in the SBOM are exploitable 24:00 What EO 14028 will require the USG to do with SBOMs in August 34:00 Who and how SBOMs will be provided and used. Business models. Links <a href="https://tomalrichblog.blogspot.com" rel="nofollow" target="_blank">Tom Alrich's Blog</a> <a href="https://tomalrichblog.blogspot.com/2021/12/who-should-be-responsible-for-component.html" rel="nofollow" target="_blank"> Tom's Who Should Be Responsible article</a> <a href="https://friday.dale-peterson.com/signup/" rel="nofollow" target="_blank">Subscribe to Dale's ICS Security - Friday News &amp; Notes</a>