What's in the box? Guest: Allan Friedman

daBOM

A package of Twinkies is a permanent fixture on Allan Friedman's desk, which he holds up to the screen during our conversation. A prime example of the underlying purpose of a Software Bill of Materials. The significance? The ingredient list on the package which lets you know what's inside.

I always use the can of beans analogy myself - but the Twinkie - well, this is the bad stuff. Seems obvious that it's better to know what you're going to consume, then assume you're eating something healthy.

You can't help but think of Allan when you think about Software Bill of Materials. He's been advocating for the use of SBOMs to increase software supply chain transparency and enhance security for years.

One of his beliefs -

Organizations should not be using software without knowing what components are inside and any potential security risks. Particularly important in today's world, where software is an integral part of almost every aspect of our lives, from our smartphones to our cars to our homes.

It's National Supply Chain Integrity month and in this episode, we'll hear about some of the Government's views on SBOMs, and why the topic is so important.

Welcome back to daBom...