From Dev to Deployment: Secure Your Supply Chain

SEC547: Defending Product Supply Chains

Focuses on SBOM driven risk assessments and vendor monitoring to uncover blind spots in your supply chain

Fortifying Resilience: An In-Depth Exploration of the Overall Product Security Assessment Poster

SEC568: Product Security Penetration Testing - Safeguarding Supply Chains and Managing Third-Party Risk

Bridge the gap between security and procurement by learning how to test and validate third-party risks.

Enhanced Vendor Risk Assessments: Maximizing Risk Reduction and Strengthening Vendor Relations

LDR553: Cyber Incident Management

Learn to identifying hidden vulnerabilities in software and hardware products.

Vendor Risk Assessment Matrix Cheat Sheet

SBOM Maturity and Process Flow Cheat Sheet

Implement Fast and Efficient Supply Chain Attack Response

When your supply chain is under attack, every second matters. A slow or ineffective incident response can lead to costly disruptions and lasting damage. Explore related resources:

LDR553: Cyber Incident Management

Built for incident response — provides structured playbooks and cross-functional coordination for handling supply chain attacks.

Supply Chain Security Incident Response: Strategies for Responding to Emerging Threats

Software Supply Chain Incident Response Cheat Sheet

SEC547: Defending Product Supply Chains

Offers hands-on labs for detecting threats from third parties and mitigating supply chain-specific attacks.

Explore the SANS.edu Program

Advance Your Career with a Graduate Certificate in Software Supply Chain Security

SANS Technology Institute | Applications Accepted Monthly Protect your organization from emerging software supply chain threats. The SANS.edu Graduate Certificate in Software Supply Chain Security delivers real-world, expert-led training and four GIAC certifications. Available 100% online and designed for working professionals who want to upgrade their skills in this fast-evolving area of cybersecurity.

Strengthen Your Weakest Links: Optimize Vendor Risk Assessments

Your security is only as strong as your least secure vendor. Transform fragmented assessments into a systematic strategy that scales with your business. Explore related resources:

SEC547: Defending Product Supply Chains

Focuses on scalable vendor risk methodologies and continuous monitoring beyond onboarding.

Vendor Risk Assessment Matrix Cheat Sheet

SEC568: Product Security Penetration Testing - Safeguarding Supply Chains and Managing Third-Party Risk

Bridge the gap between security and procurement by learning how to test and validate third-party risks

Building and Scaling SBOM Programs: Navigating the Challenges for Effective Risk Management

Enhanced Vendor Risk Assessments: Maximizing Risk Reduction and Strengthening Vendor Relations

Fortifying Resilience: An In-Depth Exploration of the Overall Product Security Assessment Poster

Maximize Your Security Impact: Defend Supply Chains with Limited Resources

Even with constrained budgets and teams, you can reduce third-party risk. Explore practical tools and strategies to help you do more with what you have:

SEC568: Product Security Penetration Testing - Safeguarding Supply Chains and Managing Third-Party Risk

Learn processes and hands-on techniques to test supply chain software and hardware.

Combating Supply Chain Attacks with Product Security Testing

SEC547: Defending Product Supply Chains

Offers hands-on labs for detecting threats from third parties and mitigating supply chain-specific attacks.

SBOM Maturity and Process Flow Cheat Sheet

LDR553: Cyber Incident Management

Helps security leaders build more coordinated and efficient response efforts, improving team capability despite staffing or budget constraints.

What Hacking the Planet Taught Us About Defending Supply Chain Attacks

Seek Out New Protocols, and Boldly Hack Undetected

Fortifying Resilience: An In-Depth Exploration of the Overall Product Security Assessment Poster

Navigate Compliance with Confidence: Meet Evolving Regulatory Demands

As standards evolve and regulatory demands increase, staying compliant can feel overwhelming. Explore related resources to help you navigate complexity, meet requirements with confidence, and protect your organization from compliance gaps.

SEC547: Defending Product Supply Chains

Explores how to meet SBOM-related regulatory requirements and build defensible compliance practices.

Navigating DORA and NIS2 Compliance for Financial Sector Organizations in the EU

LDR553: Cyber Incident Management

Prepares leaders to respond effectively to overlapping mandates and lead compliant incident response efforts.

Building and Scaling SBOM Programs: Navigating the Challenges for Effective Risk Management

SBOM Maturity and Process Flow Cheat Sheet

Overall Product Security Assessment Poster

Prepare for the Inevitable: Master Supply Chain Incident Response with Chain-Specific Playbooks

A supply chain breach is inevitable; your response doesn’t have to be improvised. Learn how to create chain-specific playbooks and explore other related resources:

SANS Emerging Threats Summit

SEC547: Defending Product Supply Chains

Learn how to detect and respond to threats originating from vendors or software dependencies.

Software Supply Chain Incident Response Cheat Sheet

Supply Chain Security Incident Response: Strategies for Responding to Emerging Threats

3CX Supply Chain Attack - What You Need to Know!

LDR553: Cyber Incident Management

Develop dedicated playbooks for third-party and supply chain compromise response.

CIMTK: Third-Party/Supply Chain Incident Management Plan Cheat Sheet