This episode outlines three core principles: manufacturers taking ownership of customer security outcomes, embracing radical transparency and accountability, and establishing strong leadership commitment to security. The episode provides detailed recommendations for manufacturers to integrate security throughout the software development lifecycle (SDLC), focusing on practices like eliminating default passwords, mandating multi-factor authentication, and utilizing secure coding techniques.

This episode highlights six key risk categories—cyber expertise, executive commitment, ICT supply chain risk management, single-source suppliers, supplier disruption, and supplier visibility— impacting IT and communications SMBs. The episode provides use cases illustrating these risks and offers practical mitigation strategies, referencing various government and industry resources. The episode is to empower SMBs to proactively address these vulnerabilities and enhance their cybersecurity posture.

This episode offers a guide to securing software supply chains, focusing on recommended practices for developers, suppliers, and customers. with detailed best practices for developers, emphasizing secure coding, build environment hardening, third-party component verification, and vulnerability response. The episode stresses the importance of secure development lifecycle (SDLC) processes, threat modeling, and artifact creation for auditing and verification. We discuss relevant frameworks like NIST SP 800-218 (SSDF) and SLSA, providing a crosswalk between its recommendations and these standards.