The Log4shell vulnerability found in the Log4j logging framework has been recognised as one of the most critical vulnerabilities ever, open source or otherwise. And, while the dangers of the Log4j vulnerability remain high, even 4 months out, the situation has highlighted an even bigger issue that is plaguing security professionals and developers: if you don’t know what’s in your software supply chain, you’re already behind.

When a flaw is disclosed, companies are instantly thrust into a race against time to fix it before it can be exploited by an attacker, meaning every minute counts. If you don’t know what’s in your software, you’re effectively giving hackers a huge head start.

While this outlook might seem bleak, Adam will easy steps you can take to significantly mitigate risk.

Learn how ABN AMRO implemented DevSecOps, the processes and tools involved, and how they are able to scale secure coding for a few thousand developers with a small team of dedicated experts. Where it came from, challenges faced, how they dealt with those, the current situation and what’s on the roadmap for the future.