The Compliance Paradox: Why More Rules Mean Faster Releases

Sponsored By:
Tuesday, February 3rd
1 pm ET
As development cycles accelerate and AI becomes integral to coding, the software supply chain is now a prime attack surface. Research shows that while 95% of organizations use AI tools, only 24% fully evaluate AI-generated code for security, IP, and quality risks. Meanwhile, regulations and frameworks like NIST SSDF, ISO/IEC 27001, and the EU CRA are reshaping expectations. Do these compliance requirements form hurdles that impede pipelines? Are existing AppSec resources ill-equipped for evolving supply chain risks?
In this webinar, we’ll cover:
- How AI and open source AI models complicate the software supply chain.
- Practical steps to automate CI/CD pipelines, validate SBOMs, and govern AI usage.
- Key insights from 540 security leaders on practices that improve efficiency and security resilience.
Register Below:
We'll send you an email confirmation and calendar invite

Steven Zimmerman
DevOps Security Solution Manager - Black Duck
Steven Zimmerman is a DevOps Security Solutions Manager for Black Duck, focusing on helping organizations establish a cohesive, resilient application security strategy with developers and software engineers built-in at critical stages. His work supports shift-left software security initiatives and DevSecOps, ensuring enterprise agility and continuous workflows without impeding development.