In this episode, CRob sits down with Sarah Evans, security research technologist at Dell and Lisa Bradley, senior director of product and application security at Dell. They dig into the challenges of implementing secure open software at a complex enterprise. Sarah sits on the OpenSSF Technical Advisory Council and at Dell’s she has been instrumental in cybersecurity innovation, conducting research within the global CTO R&D organization. Her career spans pivotal roles, including being an enterprise security architect and engaging in Identity and Access Management and IT at prestigious organizations like Wells Fargo and the U.S. Air Force.Dr. Lisa Bradley is a distinguished cybersecurity expert and visionary leader. She has earned her reputation as a trailblazer in the field of security and vulnerability management. In her current role, she oversees Dell's Product Security Incident Response Team (PSIRT), Bug Bounty Program, SBOM initiative, Dependency Management, and Security Champion and Training Programs. 02:38 How Dell is managing its ingestion and productization of open source software04:54 The complex task of managing open source software for a company the size of Dell06:34 The importance of executive support when implementing security initiatives10:40 Lisa and Sarah answer CRob’s rapid-fire questions12:40 Lisa and Sarah’s advice to aspiring developers and security professionals14:12 Lisa and Sarah’s call to actionEpisode links:Lisa Bradley on LinkedInSarah Evans on LinkedInGet involved in the OpenSSF community

Ask this episode

“What did the council decide on item 42?” — answered with the speaker and the moment.

Transcript

Related