The National Security Agency (NSA) is providing guidance on deploying a comprehensive zero-trust framework that focuses on the application and workload pillar of the Zero Trust Maturity Model introduced by the Cybersecurity and Infrastructure Security Agency. 

The post NSA’s zero-trust maturity for AppSec: What you need to know appeared first on Security Boulevard.

Software bills of materials (SBOMs) have long been seen as the technical foundation for opening up visibility into enterprise software supply chains. So far, the work has been focused on building the mechanisms for collecting and updating the software ingredients within SBOMs and organizing everything in a repeatable, standardized fashion.

The post Why shareable SBOMs are essential for software security appeared first on Security Boulevard.

One fundamental principle every threat modeler learns very early in their career is that not all threats are created equal. Some threats can be fixed more easily than others. Among the threats most difficult to fix — if they can be fixed at all — are inherent threats, which are threats that touch the essence of a system.

The post When it comes to threat modeling, not all threats are created equal appeared first on Security Boulevard.

The 32nd annual RSA Conference (RSAC) – one of the biggest cybersecurity shows in North America — was held in  San Francisco last week at the Moscone Center. The who's who-event was jam-packed with hundreds of vendors, speaking sessions, and all kinds of goodies.

The post What you missed at RSA Conference 2024: Key trends and takeaways appeared first on Security Boulevard.