Plan du cours
Introduction to Open Source Software (OSS) Management
- Defining OSS and its role in enterprise environments
- Benefits and risks of OSS adoption
- Case studies of OSS successes and failures
Establishing an OSS Policy
- Key components of an OSS governance framework
- Roles and responsibilities in OSS management
- Balancing innovation with risk mitigation
Understanding Licensing and Compliance
- Common open-source licenses and obligations
- Managing license compatibility
- Avoiding license violations
Software Bill of Materials (SBOM)
- What is an SBOM and why it matters
- Creating and maintaining an SBOM
- Industry standards and regulatory requirements
Software Composition Analysis (SCA) Tools
- Overview of SCA tools and features
- Integrating SCA into CI/CD pipelines
- Identifying and mitigating vulnerabilities
Security and Risk Management in OSS
- Monitoring OSS supply chains for threats
- Responding to OSS vulnerabilities
- Best practices for patch management
Operationalizing OSS Management
- Integrating OSS management into IT operations
- Establishing ongoing monitoring and reporting
- Building a culture of responsible OSS use
Summary and Next Steps
Pré requis
- An understanding of software development processes
- Experience with project or IT management
- Familiarity with security and compliance considerations
Audience
- IT managers
- Security and compliance officers
- Software development team leads
Nos clients témoignent (4)
Le fait qu'il y avait des exemples pratiques avec le contenu
Smita Hanuman - Standard Bank of SA Ltd
Formation - Basel III – Certified Basel Professional
Traduction automatique
Le formateur était extrêmement clair et concis. Très facile à comprendre et à assimiler les informations.
Paul Clancy - Rowan Dartington
Formation - CGEIT – Certified in the Governance of Enterprise IT
Traduction automatique
Le formateur était très motivé et compétent. Le formateur n'a pas seulement été capable de transmettre les informations, elle a également ajouté de l'humour pour alléger le sujet théorique et parfois aride du cours.
Marco van den Berg - ZiuZ Medical B.V.
Formation - HIPAA Compliance for Developers
Traduction automatique
I genuinely enjoyed the real examples of the trainer.
Joana Gomes
Formation - Compliance and the Management of Compliance Risk
Traduction automatique