Cybersecurity Minute

4 Principles of the CNCF Secure Software Factory Guidance

Cybersecurity Minute Episode 19
Chris HughesBy Updated:1 Min Read

This episode is brought to you by the Cloud Wars Expo. This in-person event will be held from June 28th to 30th at the Moscone Center in San Francisco, California. 

Highlights 

00:07 — The recently released secure software factory guidance of the Cloud Native Computing Foundation (CNCF) focuses on software provenance and build activities.

00:31 — The CNCF Secure Software Factory (SSF) guidance emphasizes four overarching principles from the Software Supply Chain whitepaper, each of which is required to ensure secure software delivery from inception to code to production:

  1. Defense in depth
  2. Signing and verification
  3. Artifact metadata analytics
  4. Automation

00:48 — The reference architecture ensures software delivered to production is secure.

Share.
Analystuser

Chris Hughes

CEO and Co-Founder
Aquia

Areas of Expertise
  • Cloud
  • Cybersecurity

Chris Hughes is a Cloud Wars Analyst focusing on the critical intersection of cloud technology and cybersecurity. As co-founder and CEO of Aquia, Chris draws on nearly 20 years of IT and cybersecurity experience across both public and private sectors, including service with the U.S. Air Force and leadership roles within FedRAMP. In addition to his work in the field, Chris is an adjunct professor in cybersecurity and actively contributes to industry groups like the Cloud Security Alliance. His expertise and certifications in cloud security for AWS and Azure help organizations navigate secure cloud migrations and transformations.

  Contact Chris Hughes ...

Related Posts

Add A Comment

Comments are closed.