План на курса
Introduction to Open Source Software (OSS) Management
- Defining OSS and its role in enterprise environments
- Benefits and risks of OSS adoption
- Case studies of OSS successes and failures
Establishing an OSS Policy
- Key components of an OSS governance framework
- Roles and responsibilities in OSS management
- Balancing innovation with risk mitigation
Understanding Licensing and Compliance
- Common open-source licenses and obligations
- Managing license compatibility
- Avoiding license violations
Software Bill of Materials (SBOM)
- What is an SBOM and why it matters
- Creating and maintaining an SBOM
- Industry standards and regulatory requirements
Software Composition Analysis (SCA) Tools
- Overview of SCA tools and features
- Integrating SCA into CI/CD pipelines
- Identifying and mitigating vulnerabilities
Security and Risk Management in OSS
- Monitoring OSS supply chains for threats
- Responding to OSS vulnerabilities
- Best practices for patch management
Operationalizing OSS Management
- Integrating OSS management into IT operations
- Establishing ongoing monitoring and reporting
- Building a culture of responsible OSS use
Summary and Next Steps
Изисквания
- An understanding of software development processes
- Experience with project or IT management
- Familiarity with security and compliance considerations
Audience
- IT managers
- Security and compliance officers
- Software development team leads
Отзиви от потребители (5)
Факта, че има практических примери с съдържанието
Smita Hanuman - Standard Bank of SA Ltd
Курс - Basel III – Certified Basel Professional
Машинен превод
Скорост на отговор и комуникация
Bader Bin rubayan - Lean Business Services
Курс - ISO/IEC 27001 Lead Implementer
Машинен превод
Курсистът беше изключително ясен и съкратен. Много лесно за разбиране и усвояване на информацията.
Paul Clancy - Rowan Dartington
Курс - CGEIT – Certified in the Governance of Enterprise IT
Машинен превод
Курсистът беше много мотивиран и компетентен. Курсистът не само бяха способен да предаде информация, но я донесе и с хумор, за да облекчи сухия теоретичен предмет.
Marco van den Berg - ZiuZ Medical B.V.
Курс - HIPAA Compliance for Developers
Машинен превод
I genuinely enjoyed the real examples of the trainer.
Joana Gomes
Курс - Compliance and the Management of Compliance Risk
Машинен превод