Training
Featured Course View All Courses
Get a Free Hour of SANS Training

Experience SANS training through course previews.

Learn More
Learning Paths
FeaturedView all Focus Areas
NEW - AI Security Training
Can't find what you are looking for?

Let us help.

Contact us
Free Resources

SANS Community Benefits

Connect, learn, and share with other cybersecurity professionals

Customer Case Studies

Discover how organizations and individual cyber practitioners use SANS training and GIAC certifications

AI Risk & Readiness

Explore expert-driven guidance, training, and tools to help defend against AI-powered threats and adopt AI securely

Join the SANS Community

Become a member for instant access to our free resources.

Sign Up
For Organizations

Public Sector

Mission-focused cybersecurity training for government, defense, and education

Partnerships

Explore industry-specific programming and customized training solutions

Sponsorship Opportunities

Sponsor a SANS event or research paper

Interested in developing a training plan to fit your organization’s needs?

We're here to help.

Contact Us
Group Purchasing
Group Purchasing

SANS360 Lightning Talks | Operationalizing AIBOMs: Policy-Gating Models and Datasets in AI Supply Chains

Download File
SANS360 Lightning Talks | Operationalizing AIBOMs: Policy-Gating Models and Datasets in AI Supply Chains (PDF, 0.78MB)Last updated: 21 Apr, 2026
Presented by:
Ugur Koc
Ugur Koc

AI supply chains ship unvetted models and datasets because VM tooling can’t see inside them. Risks aren’t just CVEs: dataset poisoning, integrity loss, misuse/misalignment, and license issues. With no NVD for AI artifacts, we operationalize AIBOMs as the missing substrate—structured metadata for provenance, lineage, licensing, and revisions—plus policy-as-code CI/CD gates, PSIRT integration, and offline caching of Hugging Face artifacts.

SANS AI Cybersecurity Summit 2026

Presenter

Ugur Koc
Ugur Koc

Ugur Koc

Dr. Ugur Koc is a Senior AI R&D Engineer at Manifest Cyber, where he leads the design and development of AI Risk Management solutions like AI-BOM generation and automated policy evaluation.

Read more about Ugur Koc
SANS360 Lightning Talks | Operationalizing AIBOMs: Policy-Gating Models and Datasets in AI Supply Chains