Programa del Curso
Introduction to Open Source Software (OSS) Management
- Defining OSS and its role in enterprise environments
- Benefits and risks of OSS adoption
- Case studies of OSS successes and failures
Establishing an OSS Policy
- Key components of an OSS governance framework
- Roles and responsibilities in OSS management
- Balancing innovation with risk mitigation
Understanding Licensing and Compliance
- Common open-source licenses and obligations
- Managing license compatibility
- Avoiding license violations
Software Bill of Materials (SBOM)
- What is an SBOM and why it matters
- Creating and maintaining an SBOM
- Industry standards and regulatory requirements
Software Composition Analysis (SCA) Tools
- Overview of SCA tools and features
- Integrating SCA into CI/CD pipelines
- Identifying and mitigating vulnerabilities
Security and Risk Management in OSS
- Monitoring OSS supply chains for threats
- Responding to OSS vulnerabilities
- Best practices for patch management
Operationalizing OSS Management
- Integrating OSS management into IT operations
- Establishing ongoing monitoring and reporting
- Building a culture of responsible OSS use
Summary and Next Steps
Requerimientos
- An understanding of software development processes
- Experience with project or IT management
- Familiarity with security and compliance considerations
Audience
- IT managers
- Security and compliance officers
- Software development team leads
Testimonios (5)
El hecho de que hubiera ejemplos prácticos con el contenido
Smita Hanuman - Standard Bank of SA Ltd
Curso - Basel III – Certified Basel Professional
Traducción Automática
Velocidad de respuesta y comunicación
Bader Bin rubayan - Lean Business Services
Curso - ISO/IEC 27001 Lead Implementer
Traducción Automática
El entrenador fue extremadamente claro y conciso. Muy fácil de entender y asimilar la información.
Paul Clancy - Rowan Dartington
Curso - CGEIT – Certified in the Governance of Enterprise IT
Traducción Automática
El entrenador estaba muy motivado y conocedor. No solo era capaz de transmitir información, sino que también lo hacía con humor para aligerar el tema teórico y seco del entrenamiento.
Marco van den Berg - ZiuZ Medical B.V.
Curso - HIPAA Compliance for Developers
Traducción Automática
I genuinely enjoyed the real examples of the trainer.
Joana Gomes
Curso - Compliance and the Management of Compliance Risk
Traducción Automática