Third party open-source libraries make up the bulk of most modern applications. Leveraging them allows us to build faster by providing functionality which we would otherwise have to write ourselves. However, not all open-source libraries are created equal, and poor third-party management can result in vulnerabilities being introduced into our applications.

In this session, we will look at just how much open source our applications are using and review some common third-party management gaps in most typical AppSec programs. We will also look at several AppSec best practice approaches for better third-party management.

In this fireside chat, Head of Infrastructure at NTUC shares his experience in building DevOps, including insights into getting stakeholder buy-in, and where to find the elusive excess budget to fund initiatives quickly.

Short description of the session. Automating Secure Software Development at Aegon. Robbie Tyrie, Information Security Manager at Aegon