当前位置:首页 > 报告详情

Supply Chain presentation (1).pptx

上传人: 2*** 编号:140599 2023-08-31 19页 15.41MB

1、Demian Ginther,SuperOrbital LLC 2022Demian Ginther,SuperOrbital LLC 2022Learning from Supply Chain Learning from Supply Chain Failures and Best Practices in Failures and Best Practices in Other IndustriesOther IndustriesAbout meAbout me20+years of Security and Systems Administration/DevopsUniversity

2、 of New MexicoBoeingRiskSense,LLCAd Hoc,LLCCenter for Medicaid and Medicare ServicesDepartment of Veterans AffairsSuperOrbital,LLCWho needs a supply chainWho needs a supply chainNon-Software industries with supply chains you may have heard about:Food,Goods/Commerce,Medical/Chemical,Entertainment,Ene

3、rgy/Utilitiesand what is it,anyway?and what is it,anyway?A network of entities-individuals,groups,resources,activities,and technology involved in the creation and sale of a productThe entire system of producing and delivering a product or serviceNotable recent software supply chain Notable recent so

4、ftware supply chain issuesissuesSolar Winds Orion -2020PHP git repository-2021Homebrew-2021Log4j-2021Non-Software Supply Chain conceptsNon-Software Supply Chain conceptsSome apply,some dont.Some apply,some dont.Traceability and TransparencySafety and QualityProductionProcessingPackagingStoragePhysic

5、al DistributionInventory ControlDisposal and CleanupLogisticsTracking DistributionAfter-Sales TrackingTraceability and TransparencyTraceability and Transparency“When the lack of transparency in supply chains delays the identification of contamination sources and the root causes of product problems,t

6、he economic and public health costs can be considerable.”-Scott Gottlieb,Statement as FDA Commissioner,March 19,2019Ingredients(Dependencies)Producer(Author)Location(Deployments)Problems/Recalls(Vulnerabilities)Safety and QualitySafety and QualityFreshnessPackagingPersonnel safety(Labor laws,transpo

word格式文档无特别注明外均可编辑修改,预览文件经过压缩,下载原文更清晰!
三个皮匠报告文库所有资源均是客户上传分享,仅供网友学习交流,未经上传用户书面授权,请勿作商用。
本文主要讨论了软件供应链中的失败案例和最佳实践,以及我们可以从其他行业中学到的经验。文章首先介绍了软件供应链的定义和重要性,然后列举了一些著名的软件供应链失败案例,如SolarWinds、PHP、Homebrew和Log4j等。接着,文章探讨了非软件行业供应链的一些概念,如可追溯性和透明度,以及它们如何应用于软件供应链。文章还讨论了软件供应链的物流,包括持续集成和部署流程,以及如何通过自动化和零信任架构来提高软件供应链的安全性。最后,文章通过一些非软件行业的案例,如罗马生菜、花生公司和Ever Given事件,来强调预防措施和计划的重要性。总的来说,文章强调了软件供应链的可追溯性、透明度和自动化的重要性,以及制定应对计划以减少潜在风险的必要性。
如何确保软件供应链的透明度和可追溯性? 如何自动化软件供应链中的安全检查? 如何制定软件供应链的备份计划以应对突发事件?
客服
商务合作
小程序
服务号
折叠