|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/software-supply-chain-security-masterclass/
课程评论：没有评论
**Ultimate Software Supply Chain Security Masterclass "2025" 课程总结** 本课程是关于掌握软件供应链安全的综合性培训，重点在于利用软件物料清单（SBOM）来加强软件供应链。 **课程核心内容：** * **SBOM 的关键作用：** 理解 SBOM 在提升软件供应链可见性和安全性方面的重要性。 * **全球法规合规：** 将 SBOM 实践与关键法规接轨，包括： * 美国行政命令 14028 (EO 14028) * 欧盟网络韧性法案 (EU CRA) * 美国食品药品监督管理局 (FDA) 软件法规 * **SBOM 的实践操作：** * 学习使用现代工具和 CI/CD 流水线生成、验证和集成 SBOM。 * 评估开源风险并确保许可证合规性。 * 构建用于持续监控和审计准备的策略、工作流程和仪表板。 * **领导企业级 SBOM 项目：** * 推动组织范围内的 SBOM 采用，并与供应商合作以实现下游合规。 * 通过模拟真实世界的审计场景，准备可辩护的文档来应对监管机构和客户。 **学习目标：** 完成本课程后，学员将能够： * 理解 SBOM 在软件供应链可见性和安全性中的作用。 * 将 SBOM 实践与 EO 14028、EU CRA 和 FDA 法规对接。 * 利用工具和 CI/CD 流水线生成、验证和操作化 SBOM。 * 通过 SBOM 数据评估开源风险和许可证合规性。 * 构建策略、工作流程和仪表板，以实现持续监控和审计准备。 * 领导企业级 SBOM 项目，并与供应商就下游合规性开展合作。 * 模拟审计场景，并向监管机构和客户展示可辩护的文档。 **目标学员：** 本课程专为安全专业人员、开发人员和合规领导者设计，旨在为他们提供构建弹性、透明和可审计软件供应链所需的框架、工具和实操技术。 **最终目标：** 通过掌握 SBOM 和相关的安全实践，确保您的软件供应链安全，赋能您的团队，并自信地领导相关工作。
Welcome to Mastering Software Supply Chain SecurityWe're thrilled to have you join us on this journey to strengthen your software supply chain through the power of SBOMs (Software Bill of Materials).In this course, you'll gain the knowledge and hands-on skills to:Understand the critical role of SBOMs in modern cybersecurityAlign your practices with global regulations like EO 14028, EU CRA, and FDA mandatesGenerate, validate, and operationalize SBOMs using real-world tools and CI/CD pipelinesEvaluate open-source risks and ensure license complianceBuild audit-ready workflows and lead enterprise-wide SBOM programsWhether you're a security professional, DevOps engineer, or compliance leader, this course is designed to empower you with actionable insights and practical tools to make a real impact.Gain the skills to implement and lead Software Bill of Materials (SBOM) initiatives that align with global regulations and secure your software supply chain.Understand SBOM FundamentalsExplore the critical role of SBOMs in enhancing software supply chain visibility and security.Navigate Global RegulationsMap SBOM practices to key mandates including:U.S. Executive Order 14028EU Cyber Resilience Act (CRA)FDA Software RegulationsHands-On SBOM ImplementationLearn to generate, validate, and integrate SBOMs using modern tools and CI/CD pipelines.Risk & Compliance ManagementEvaluate open-source risks and ensure license compliance using SBOM data.Build for Audit ReadinessCreate policies, workflows, and dashboards for continuous monitoring and audit preparedness.Lead Enterprise SBOM ProgramsDrive organization-wide adoption and collaborate with vendors for downstream compliance.Simulate Real-World AuditsPractice audit scenarios and prepare defensible documentation for regulators and customers.By the end of this course, learners will be able to:Understand the role of SBOMs in software supply chain visibility and securityMap SBOM practices to global regulations including EO 14028, EU CRA, and FDA mandatesGenerate, validate, and operationalize SBOMs using tools and CI/CD pipelinesEvaluate open-source risks and license compliance using SBOM dataBuild policies, workflows, and dashboards for continuous monitoring and audit readinessLead enterprise-wide SBOM programs and engage vendors for downstream complianceSimulate audit scenarios and present defensible documentation to regulators and customersEquip security professionals, developers, and compliance leaders with the frameworks, tools, and real-world techniques to build resilient, transparent, and auditable software supply chains using SBOMs and aligned security practices.Secure your software supply chain. Empower your team. Lead with confidence.
