Kristin Demoranville
speaker
976 appearances
11 recordings
1 series
first heard Jun 2024
last heard Mar 2025
Kristin Demoranville’s voice in public audio — every appearance, attributed to the second.
Trend
recordings per month · last 12 monthsNo recordings in the last 12 months.Older appearances are listed below; set an alert to hear about the next one.
Appearances
We've now live in a world that is changed. This wasn't a question 20 years ago.
necessarily and now all of a sudden it's become that I think about like the the chipsets for boards and things like that I've watched them being made in factories before and I often question does anybody have what happens with the software that goes on this do we have like a list of things that go on this and people always looked at me weird and I was like but I'm just curious like what are you doing and the question always was it goes to the the vendor and then they do what they want with it but we made the board are we responsible
I don't know, like those kind of things start to come in my mind for when I talk about SBOMs because where does the responsibility really lie? You know, is it, I think it's both parties. I think it's the receiver and the giver for sure have to be responsible on both sides of the house for what they do with their software. It's basic hygiene, really.
And you wouldn't even let your driver in the door. They sit in like a caged area inside the warehouse, generally speaking.
I think that's because people try to boil the ocean when they just need to make a cup of tea. One of my favorite quotes from a friend. It's true, though, right? Because when you look at it as a whole, it's like, oh, my goodness, like this is so much. And then you center it down to like that one warehouse that you're working with or that that one particular facility you're in.
It gets a little easier to deal with because if you can get it to work in one of your production environments or your your farm or any type of industry you're in, you'll be able to duplicate it. It should be fairly easy. It might be a little more nuanced in some places, depending on what you have, if you have different regulations that are based on that.
But generally speaking, you can duplicate the work. It's not like you're gonna reinvent the wheel every time. And I think that's what people get stressed about because supply chain in general is so daunting because you're looking at the whole supply chain. It's ginormous. You can't do that. You have to look at it and like, how does it affect me?
And I always tell people, get a whiteboard or something or a piece of paper. And literally draw like your facility in the middle and then figure out everything that's around it and then go after it one at a time, you know, and then if you can attack a couple at a time, great.
That's how you deal with supply chain, really, in like the most basic bare bones sense in terms of security and or management in general. Yeah. And I'm sure there's some supply chain people on the on that are listening to like. No, it's so much more complicated. No, it really isn't. Like it really is that much of a breakdown. You don't have to make it difficult. You're just making it difficult.
Don't make it difficult. You need to make it simple. And especially with the food industry that's running in a rapid rate, they're forecasted out. This is a lot of stuff going on. We're innovating. We're preparing for the future at all times. Nobody's got time to sit there and deal with the detailed daunting tasks. So if they can replicate it and do it faster, they will.
Or if they can automate it in some capacity, also will help. I mean, we have things like AI. I know open source is a scary thing, but that is going to help in this situation at some point, I'm sure, because it can analyze massive amounts of data, which a human being can't do. So...
Mark, as I'm saying all that, I'm now wondering what does Manifest Cyber do in this world and how are you helping and get through this? Because clearly this is something that where everybody's going to probably either need help with or to scale up or if you're a small shop or even if you're a big shop, you're going to need a little support because again, like we said, can't boil the ocean.
You can only make that cup of tea.
That's awesome.
We'll be right back after a short break. Or if you would prefer a less personal way to share your feedback, we also have an audience survey available in the show notes and on the website. Did you also know that Bites and Bites podcast has an Instagram and LinkedIn page? Check us out and give us a follow on both. Thank you for those who already do.
Lastly, if you enjoyed the show, please rate us on your listening platform. Believe it or not, this really helps the show and encourages others to find us. As a listener, you are part of the show and your support is paramount. Thank you so much. Now back to my conversation with Mark.
And especially if you're doing food defense investigations or any type of food safety investigations, you will have probably at some point have to look at an SBOM just to understand what happened with the software if it ended up being some type of a cyber physical situation.
And I think that's super important to be able to know where that is and be able to work with the people who can probably translate it for you because some of it won't be overly, as you say, easy to read, basically. Yeah. if some of it will be a little bit more daunting. So being able to work with those teams and knowing which teams to go to is important, too.
And again, this goes back to having a strong third party management team that is actually knows your business and what you're doing. And that's that's super important. You know, you touched on this a bit, Mark, that we isolate a lot inside of our different silos, of course.
And I think it's really frustrating to me that a lot of times when you work in certain aspects of security, you actually don't even really understand what the company is doing or what they are. Are they a manufacturing company? Are they an entertainment company? Are they a food company? Or what are they?
Showing 921–940 of 976 · page 47 of 49
← Previous
Next →