Securing Your ird Party Vendors (and their Source Code) by John Boruvka
03/11/2014
I recently attended Mass TLC's 2014 Security Conference: Building Security into an Insecure World. One of the breakout sessions that really grabbed my attention was Securing Your Third Party Vendors. It discussed how your company and products may be secure; but what about those of third-party vendors and supply chain partners? The speakers for this session included Edna Conway, Chief Security Officer, Global Supply Chain at Cisco Systems; Joshua Brickman, Director, Security Evaluations, Oracle; Sally Long, Executive Director, The Open Group; and Adam Woodbury, Principal Engineer, MITRE. Thanks to all of the speakers for addressing this important topic.
Every software product today, relies on someone else's code at some level. At Iron Mountain, more than half of the escrow deposits we test today contain open source and all of them rely on third party code or tools. That makes everyone that is a software developer also a software user - and that creates risk which this group shared their experience with the audience.
According to a Forrester Research survey, four out of five developers use an open source development tool.
The panel talked about knowing where your third-party code comes from, whether its open source code or proprietary. They talked about application testing the code and ensuring that any known vulnerabilities are plugged and patched. In this day and age, there is lots of news almost daily about data breaches, just take a look at Home Depot & Target. It certainly makes sense, but what about the next level? You still need to think about the code itself and the need to be able to access it when something major happens. Ultimately, the product you sell has your logo and brand on it, your customers will hold you responsible to how it works or doesn't. So in today's world where every open source developer is also a licensee of software, reliant on third parties, shouldn't you be more prepared?
What if You Could:
Take the risk out of losing control when you embed third-party software?
Have leverage to ensure that your third-party vendor delivered on the promise of the software?
Have a mechanism to protect you even if your third-party developer closed its doors or stopped supporting your software?
Have peace of mind knowing that you're prepared for the unexpected?
Complement the use of your third-party vendor by utilizing the advantages of storing the entire code in an escrow account. Once you have it placed in the escrow account you can verify what is exactly in there and know for sure that if anything were to happen- you wouldn't suffer any repercussions.
Think of it this way You own a milk company, we'll call it Moo Moo, Inc., and you are 100% sure that the milk you are producing is clean, safe, and completely healthy. But then you place it in a third-party supplier's plastic milk jug to be shipped out to stores across the nation. You later find out that the jug has chemical toxins and they were released from the plastic into the milk and some of your consumers became really sick. Thousands of gallons of milk were recalled and you endured a cost, and blow to your reputation, factors that you were not prepared for. If you had outsourced, secured, and tested the plastic material first, then you would have been fine to continue normal business operations. However, by neither securing nor testing it, you ended up in a disruption to your business cycle since you had to wait for more plastic containers to be shipped to you and then verify that they were not chemically contaminated.
Although unfortunately we in the Technology Escrow business do not secure and verify your plastic milk bottles, we will help you manage your intellectual property and would be happy to have a discussion with you.
Thanks again to MassTLC for putting on such a thought-provoking conference!
LINK: | http://blogs.ironmountain.com/2014/uncategorized/securing-your-third-p... |
See more stories from ironmountain |
Most recent headlines
04/08/2024
Dalet Appoints Santiago Solanas as CEO to Lead Next Era of Growth and Innovation
Dalet, a leading technology and service provider for media-rich organizations, is excited to announce Santiago Solanas as its new Chief Executive Officer (CEO)....
03/06/2024
Dalet and Veritone Reach Agreement to Distribute, Transact and Monetize Media Archives
Dalet, a leading technology and service provider for media-rich organizations, a...
02/06/2024
AE add 3D motion to still photographs
AE add 3D motion to still photographs Brie Clayton June 2, 2024 0 Comments AE add 3D motion to still photographs May 30, 2024COW Featured Resume: Pa...
01/06/2024
How Spotify is Protecting Election Integrity in 2024
Dustee Jenkins, Chief Public Affairs Officer, Spotify With billions of people from over 50 countries heading to the polls to cast their vote, 2024 is shaping u...
01/06/2024
TV Tech Weekly Product News Wrap-Up
Busy this week catching up from the Memorial Day holiday? Our TV Tech weekly wrap-up of all our coverage of new products, services and deployments will get you ...
01/06/2024
Guy Ritchie Behind Young Sherlock' Series on Prime Video
Young Sherlock, with Guy Ritchie directing and executive producing, is a go at Prime Video. Hero Fiennes Tiffin plays Sherlock. Prime Video calls it the origin...
01/06/2024
Caitlin Clark-Cameron Brink WNBA Matchup Draws 724,000 Viewers
The Los Angeles Sparks-Indiana Fever game on Friday featuring the top two WNBA draft picks, Caitlin Clark and Cameron Brink, was the most watched WNBA game on I...
01/06/2024
Lionsgate Names Brian Weinstein Co-CEO of 3 Arts Entertainment
Lionsgate, which increased its majority stake in 3 Arts Entertainment in January, said it named Brian Weinstein co-CEO of 3 Arts....
01/06/2024
Netflix to Launch Video Games For Perfect Match', Too Hot to Handle', Other Unscripted Hits
Netflix is launching four video games based on unscripted series this year. They...
01/06/2024
Broadcast Networks Go Live for Donald Trump Verdict
ABC, CBS, NBC and Fox affiliates switched from their regular programming to carry live coverage of the verdicts in the porn star hush-money trial of former Pres...
31/05/2024
Orange County Expansion Helps Aerojet Rocketdyne Boost Solid Rocket Motor Production
A U.S. Marine fires an FIM-92 Stinger missile during a training exercise in Yuma...
31/05/2024
IAB Tech Lab Expands Open Measurement SDK Capabilities to Support Samsung and LG TVs
NEW YORK The global body that sets technical standards for digital advertising h...
31/05/2024
Study: Max, Apple TV+ Have Fewest 'Committed Customers'
In a new analysis of what services might make up a good bundle and what services might benefit the most from bundling, Antenna has released new data that highli...
31/05/2024
Report: Older SVOD Subscribers Unfazed by Price Hikes Will Drive Revenue Growth
Global SVOD revenues will increase by $116.6 billion by 2031, a growth rate of 13.3% per year over the next eight years, according to a new report from MIDiA Re...
31/05/2024
FCC Media Bureau Incorporates 2020 Census Data into TVStudy Software
WASHINGTON, D.C. The FCC Media Bureau has announced that effective August 1, 2024 the Commission's TVStudy software will incorporate the most recent U.S. Ce...
31/05/2024
NBCU's FAST Channel TNBC to Rebrand as NBC Comedy Vault
NBCUniversal has announced that its FAST channel TNBC will be rebranding to NBC Comedy Vault on June 1 and that the free streaming service will officially launc...
31/05/2024
TVRI Taps Ateme for Transition to 4K UHD OTT Streaming
PARIS Ateme has announced that the Indonesian public broadcaster TVRI is making the transition to 4K UHD OTT streaming using Ateme technologies....
31/05/2024
Marlow Film Studios considering next steps' as council blocks plans
The proposal had received support from James Cameron, Andy Serkis, Paul Greengrass, Richard Curtis, and Jeremy Irons By Matthew Corrigan Published: May 31, 2...
31/05/2024
Skydance submits new Paramount Global bid, Sony talks still progressing'
According to multiple reports, the new bid from Skydance offers a better deal to Paramounts Class B shareholders, who were said to be unhappy with the companys ...
31/05/2024
2024 Rise Awards open for entries
The awards recognise women and companies who are stand-out performers, innovators and leaders in the broadcast media technology industry By Matthew Corrigan ...
31/05/2024
Samsung, LG Adopt IAB Software Kit for CTV Ad Measurement
NEW YORK The global body that sets technical standards for digital advertising has expanded the reach of its measurement software development kit to include Sam...
31/05/2024
The Old Investment Cycles of Broadcast Technology are Being Run Over'
The rise of digital platforms is fundamentally changing the broadcast newsroom and its investment in technology according to Jon Roberts, director of technology...
31/05/2024
Study: Max, Apple TV Have Fewest 'Committed Customers'
In a new analysis of what services might make up a good bundle and what services might benefit the most from bundling, Antenna has released new data that highli...
31/05/2024
State Broadcasters Urge Passage of Broadcast VOICES Act
WASHINGTON, D.C. Fifty state broadcasters associations, including the District of Columbia and the Commonwealth of Puerto Rico, have sent a letter to Congressio...
31/05/2024
EVS Names Richard Katz SVP Operations for NALA region
EVS has announced the appointment of Richard Katz as senior vice president of operations for the North and Latin American (NALA) region. This appointment is par...
31/05/2024
CommScope to Buy Cable Business Assets of Casa Systems for $45.1M
CommScope has announced that it was selected by Casa Systems, Inc. as the highest to acquire Casa's cable business assets and that the two companies have en...
31/05/2024
NAB Withdraws De Niro's Service Award
Robert De Niro won't be receiving the Service to America Leadership Award from the NAB Leadership Foundation after all....
31/05/2024
Viant Integrates With Google Cloud's BigQuery Clean Rooms
Viant Technology said it formed an integration with Google Cloud's BigQuery data clean rooms...
31/05/2024
The CW To Broadcast Snoop Dogg Arizona Bowl
The CW said it will broadcast the 2024 Snoop Dogg Arizona Bowl presented by Gin & Juice by Dre and Snoop Last year, The CW aired the game when it was called Bar...
31/05/2024
Allen Media Makes Carriage Deal With Amazon Fire Channels
Allen Media Group said it made a deal with Amazon's Fire TV Channel that will make content from several of Allen's outlet available via Fire TV and Echo...
31/05/2024
Robert De Niro Will Not Receive Service to America Award
Robert De Niro, announced as the winner of the NAB's Leadership Foundation's Service to America Leadership Award on May 28, will not get the award. The ...
31/05/2024
Comcast Technology Solutions To Manage Channels for AccuWeather
Comcast Technology Solutions was selected by AccuWeather to create, manage and distribute linear and over-the-top video channels....
31/05/2024
Attention to Connected TV Ads Grew in Q1, TVision Study Finds
Connected TV is becoming a bigger deal for consumers and advertisers, according to a new report from TVision....
31/05/2024
A Guitar Solo Trick You've Never Heard Before
By Craig Anderton Let's get right to what this sounds like. It's not quite feedback or tape reverse, it's well, listen to what it does in this blue...
31/05/2024
VEON discloses April YTD trading update at its AGM
31 May 2024 VEON discloses April YTD trading update at its AGM Amsterdam, 31 May 2024 07:00 CEST - VEON April YTD 2024 Highlights Total revenue of USD 1,278 ...
31/05/2024
VEON Announces Its New Board, Names Founder Augie Fabela as Chairman
31 May 2024 VEON Announces Its New Board, Names Founder Augie Fabela as Chairman Amsterdam, 31 May 2024, 16.00 CET: VEON Ltd. (NASDAQ: VEON, Euronext Amsterdam...
31/05/2024
Tribeca Festival and Open AI Announce Sora Shorts
May 31st, 2024 TRIBECA FESTIVAL AND OPEN AI ANNOUNCE SORA SHORTS' Five Commissioned Short Films Created Using Sora Debut at 2024 Tribeca Festival New ...
31/05/2024
In-Venue Technology Wrap-Up: How 4K, IP, and More are Changing the Game Pres Game
In-Venue Technology Wrap-Up: How 4K, IP, and More are Changing the Game Pres Gam...
31/05/2024
UEFA Champions League Final 2024: The Facts and Figures Behind This Weekend's Knockout Between Real Madrid CF and Borussia Dortmund
UEFA Champions League Final 2024: The host broadcast facts and figures for Real ...
31/05/2024
UEFA Europa Conference League Final 2024: Bringing the Broadcast to Global TV Screens With the Production Facts
UEFA Europa Conference League Final 2024: Bringing the broadcast to global TV sc...
31/05/2024
Willow Offers Free 2024 ICC T20 Cricket World Cup Preview via DirecTV, Verizon, Optimum
Willow Offers Free 2024 ICC T20 Cricket World Cup Preview via DirecTV, Verizon, ...
31/05/2024
Women's College World Series: ESPN Brings Live Drone, Two-Point Cabled, and Cinematic On-Field Cameras to Oklahoma City
Women's College World Series: ESPN Brings Live Drone, Two-Point Cabled, and ...
31/05/2024
SVG College Summit Brings Video-Production Industry Together in Atlanta in the Midst of Unprecedented Change
SVG College Summit Brings Video-Production Industry Together in Atlanta in the M...
31/05/2024
UEFA Champions League Final 2024: CBS Sports' UCL Today Studio Show Is Pitchside at Wembley Stadium
UEFA Champions League Final 2024: CBS Sports' UCL Today Studio Show Is Pitch...
31/05/2024
Master of the House' Unveils a Scandalous Tale of Power and Greed on July 18
Back to All News Master of the House' Unveils a Scandalous Tale of Power and Greed on July 18 Entertainment 31 May 2024 GlobalThailand Link copied to ...
31/05/2024
JEEtu Bhaiya is Back: Kota Factory' Season 3 Arrives on Netflix June 20
Back to All News JEEtu Bhaiya is Back: Kota Factory' Season 3 Arrives on Netflix June 20 Entertainment 31 May 2024 GlobalIndia Link copied to clipboar...
31/05/2024
Thales has completed the sale of its Ground Transportation Systems business
Facebook Twitter LinkedIn With around 9,000 employees, Ground Transportation Systems is a global leader in Rail Signaling and Train Control Systems, Telec...
31/05/2024
RT 2FM is the home of music this summer
RT 2FM is the home of music this summer, entertaining listeners across the day and night, with the best music, chat and interviews providing the soundtrack to ...
31/05/2024
NVIDIA Grace Hopper Superchip Accelerates Murex MX.3 Analytics Performance, Reduces Power Consumption
After the 2008 financial crisis and increased risk-management regulations that f...