From Dev to Deployment: Secure Your Supply Chain

Focuses on SBOM driven risk assessments and vendor monitoring to uncover blind spots in your supply chain

SEC568: Product Security Penetration Testing - Safeguarding Supply Chains and Managing Third-Party Risk

Bridge the gap between security and procurement by learning how to test and validate third-party risks.

Learn to identifying hidden vulnerabilities in software and hardware products.

Enhanced Vendor Risk Assessments: Maximizing Risk Reduction and Strengthening Vendor Relations

Fortifying Resilience: An In-Depth Exploration of the Overall Product Security Assessment Poster

Vendor Risk Assessment Matrix Cheat Sheet

SBOM Maturity and Process Flow Cheat Sheet

Supply Chain Compromises Pt. 1 | The Incident Commander Series Ep. 3

Supply Chain Cybersecurity Forum: Securing What You Don’t Control

June 26 | 9AM EDT | Live Online In this focused 3-hour forum, leading experts will share hands-on offensive and defensive strategies for securing the digital supply chain—from code to component—using proven tools, frameworks, and real-world insights. Whether you’re in the trenches dissecting firmware or leading enterprise risk discussions with executives and suppliers, this forum is designed to help you enhance your supply chain security.

View Agenda & Register

Implement Fast and Efficient Supply Chain Attack Response

When your supply chain is under attack, every second matters. A slow or ineffective incident response can lead to costly disruptions and lasting damage. Explore related resources:

Supply Chain Compromises Pt. 2 | The Incident Commander Series Ep. 4

CIMTK: Third-Party/Supply Chain Incident Management Plan Cheat Sheet

Built for incident response — provides structured playbooks and cross-functional coordination for handling supply chain attacks.

Supply Chain Security Incident Response: Strategies for Responding to Emerging Threats

Software Supply Chain Incident Response Cheat Sheet

Offers hands-on labs for detecting threats from third parties and mitigating supply chain-specific attacks.

Strengthen Your Weakest Links: Optimize Vendor Risk Assessments

Your security is only as strong as your least secure vendor. Transform fragmented assessments into a systematic strategy that scales with your business. Explore related resources:

Focuses on scalable vendor risk methodologies and continuous monitoring beyond onboarding.

Vendor Risk Assessment Matrix Cheat Sheet

SEC568: Product Security Penetration Testing - Safeguarding Supply Chains and Managing Third-Party Risk

Bridge the gap between security and procurement by learning how to test and validate third-party risks.

Enhanced Vendor Risk Assessments: Maximizing Risk Reduction and Strengthening Vendor Relations

Building and Scaling SBOM Programs: Navigating the Challenges for Effective Risk Management

Fortifying Resilience: An In-Depth Exploration of the Overall Product Security Assessment Poster

SEC568: Product Security Penetration Testing - Safeguarding Supply Chains and Managing Third-Party Risk

Maximize Your Security Impact: Defend Supply Chains with Limited Resources

Even with constrained budgets and teams, you can reduce third-party risk. Explore practical tools and strategies to help you do more with what you have:

Learn processes and hands-on techniques to test supply chain software and hardware.

Combating Supply Chain Attacks with Product Security Testing

Offers hands-on labs for detecting threats from third parties and mitigating supply chain-specific attacks.

SBOM Maturity and Process Flow Cheat Sheet

Helps security leaders build more coordinated and efficient response efforts, improving team capability despite staffing or budget constraints.

What Hacking the Planet Taught Us About Defending Supply Chain Attacks

Seek Out New Protocols, and Boldly Hack Undetected

Fortifying Resilience: An In-Depth Exploration of the Overall Product Security Assessment Poster

Navigate Compliance with Confidence: Meet Evolving Regulatory Demands

As standards evolve and regulatory demands increase, staying compliant can feel overwhelming. Explore related resources to help you navigate complexity, meet requirements with confidence, and protect your organization from compliance gaps.

Explores how to meet SBOM-related regulatory requirements and build defensible compliance practices.

Navigating DORA and NIS2 Compliance for Financial Sector Organizations in the EU

Prepares leaders to respond effectively to overlapping mandates and lead compliant incident response efforts.

Building and Scaling SBOM Programs: Navigating the Challenges for Effective Risk Management

SBOM Maturity and Process Flow Cheat Sheet

Overall Product Security - Assessment Poster

Explore SANS Courses that can help to strengthen your supply chain to meet DORA Compliance.

DORA Resource Hub

Explore Here

NIS2 Resource Hub

Explore SANS courses that can equip you with the skills to secure your supply chain to meet NIS2 compliance.

Explore Here

Prepare for the Inevitable: Master Supply Chain Incident Response with Chain-Specific Playbooks

A supply chain breach is inevitable; your response doesn’t have to be improvised. Learn how to create chain-specific playbooks and explore other related resources:

Supply Chain Security Incident Response: Strategies for Responding to Emerging Threats

Learn how to detect and respond to threats originating from vendors or software dependencies.

Software Supply Chain Incident Response Cheat Sheet

3CX Supply Chain Attack - What You Need to Know!

Develop dedicated playbooks for third-party and supply chain compromise response.