“Knowing what’s in your software, in your organization, can help you quickly determine if you are impacted by a new vulnerability.” - Chris Castaldo 
In this episode, Allan is joined by author and CISO, Chris Castaldo, to share his knowledge on Software Bills of Materials (SBOMs) and their potential implications and use. Chris explains the concept and purpose of SBOMs, his tips for signing and securing SBOMs in terms of the CI/CD pipeline, and his thoughts on SBOMs being a roadmap for “bad guys.” Lastly, he shares advice on managing and understanding contracts. 
Listen to Chris Castado’s previous Cyber Ranch episode <a href='https://hackervalley.com/cyberranch/business-oriented-security-w-chris-castaldo/'>here</a> and be sure to grab a copy of his <a href='https://www.amazon.com/Start-Up-Secure-Cybersecurity-Company-Founding/dp/1119700736'>book</a>! 
 
Guest Bio:
Chris Castaldo is the author of “Start-up Secure: Baking Cybersecurity into your Company from Founding to Exit”. He is an experienced and industry recognized CISO with over 20 years of experience in cybersecurity. Chris is an expert in building cybersecurity programs from the ground up and specializes in applying cybersecurity in start-ups from seed to exit. He is also a Visiting Fellow at the National Security Institute (NSI) at George Mason University's Antonin Scalia Law School.
 
Links:
Sponsored by our good friends at <a href='https://www.axonius.com/'> Axonius</a>
Stay in touch with Chris Castaldo on <a href='https://www.linkedin.com/in/chriscastaldo/'>LinkedIn</a>
Follow<a href='https://allanalford.com/'> Allan Alford</a> on<a href='https://linkedin.com/in/allanalford'> LinkedIn</a> and<a href='https://twitter.com/AllanAlfordinTX'> Twitter</a>
Purchase a Cyber Ranch Podcast T-Shirt at the<a href='https://store.hackervalley.com/'> Hacker Valley Store</a> 
Continue this conversation on our <a href='https://discord.com/invite/avaeNEprYG'>Discord</a>
Listen to more from the<a href='https://hackervalley.com/'> Hacker Valley Studio</a> and<a href='https://hackervalley.com/cyberranch'> The Cyber Ranch Podcast</a>

“Knowing what’s in your software, in your organization, can help you quickly determine if you are impacted by a new vulnerability.” - Chris Castaldo 
In this episode, Allan is joined by author and CISO, Chris Castaldo, to share his knowledge on Software Bills of Materials (SBOMs) and their potential implications and use. Chris explains the concept and purpose of SBOMs, his tips for signing and securing SBOMs in terms of the CI/CD pipeline, and his thoughts on SBOMs being a roadmap for “bad guys.” Lastly, he shares advice on managing and understanding contracts. 
Listen to Chris Castado’s previous Cyber Ranch episode <a href='https://hackervalley.com/cyberranch/business-oriented-security-w-chris-castaldo/'>here</a> and be sure to grab a copy of his <a href='https://www.amazon.com/Start-Up-Secure-Cybersecurity-Company-Founding/dp/1119700736'>book</a>! 
 
Guest Bio:
Chris Castaldo is the author of “Start-up Secure: Baking Cybersecurity into your Company from Founding to Exit”. He is an experienced and industry recognized CISO with over 20 years of experience in cybersecurity. Chris is an expert in building cybersecurity programs from the ground up and specializes in applying cybersecurity in start-ups from seed to exit. He is also a Visiting Fellow at the National Security Institute (NSI) at George Mason University's Antonin Scalia Law School.
 
Links:
Sponsored by our good friends at <a href='https://www.axonius.com/'> Axonius</a>
Stay in touch with Chris Castaldo on <a href='https://www.linkedin.com/in/chriscastaldo/'>LinkedIn</a>
Follow<a href='https://allanalford.com/'> Allan Alford</a> on<a href='https://linkedin.com/in/allanalford'> LinkedIn</a> and<a href='https://twitter.com/AllanAlfordinTX'> Twitter</a>
Purchase a Cyber Ranch Podcast T-Shirt at the<a href='https://store.hackervalley.com/'> Hacker Valley Store</a> 
Continue this conversation on our <a href='https://discord.com/invite/avaeNEprYG'>Discord</a>
Listen to more from the<a href='https://hackervalley.com/'> Hacker Valley Studio</a> and<a href='https://hackervalley.com/cyberranch'> The Cyber Ranch Podcast</a>

thecyberranchpodcast.podbean.com/3ac2d715-9f22-3a45-a52c-9a685ea72056

“Knowing what’s in your software, in your organization, can help you quickly determine if you are impacted by a new vulnerability.” - Chris Castaldo 
In this episode, Allan is joined by author and CISO, Chris Castaldo, to share his knowledge on Softw...

“Knowing what’s in your software, in your organization, can help you quickly determine if you are impacted by a new vulnerability.” - Chris Castaldo 
In this episode, Allan is joined by author and CISO, Chris Castaldo, to share his knowledge on Software Bills of Materials (SBOMs) and their potential implications and use. Chris explains the concept and purpose of SBOMs, his tips for signing and securing SBOMs in terms of the CI/CD pipeline, and his thoughts on SBOMs being a roadmap for “bad guys.” Lastly, he shares advice on managing and understanding contracts. 
Listen to Chris Castado’s previous Cyber Ranch episode here and be sure to grab a copy of his book! 
 
Guest Bio:
Chris Castaldo is the author of “Start-up Secure: Baking Cybersecurity into your Company from Founding to Exit”. He is an experienced and industry recognized CISO with over 20 years of experience in cybersecurity. Chris is an expert in building cybersecurity programs from the ground up and specializes in applying cybersecurity in start-ups from seed to exit. He is also a Visiting Fellow at the National Security Institute (NSI) at George Mason University's Antonin Scalia Law School.
 
Links:
Sponsored by our good friends at  Axonius
Stay in touch with Chris Castaldo on LinkedIn
Follow Allan Alford on LinkedIn and Twitter
Purchase a Cyber Ranch Podcast T-Shirt at the Hacker Valley Store 
Continue this conversation on our Discord
Listen to more from the Hacker Valley Studio and The Cyber Ranch Podcast

All About SBOMs w/ Chris Castaldo

Apple

Google

Spotify

Amazon

Ride the cyber trails with one CISO (Allan Alford) and a diverse group of friends and experts who bring a human perspective to cybersecurity.