Red Hat Shares — May 2016: Open source security

Software is like food: To know it’s safe, you need to know where it comes from and what’s in it.

Today, almost everything includes open source software—from TVs to space probes to enterprise apps. Your business software likely includes third-party, open source components, too. Understanding your software’s supply chain tells you how secure it is, just like knowing where your food comes from helps you decide if it’s safe to eat. Ask your vendors where their software comes from, and if they:

• Closely track upstream projects.
• Inspect, test, secure, log, and digitally sign everything from the community that goes into their commercial software.
• Supply high-quality security updates and monitor sources for ongoing threats.
• Have a dedicated product security team that can cut through the hype of branded threats, like Shellshock and Heartbleed, and patch the problem quickly.
• Have clearly defined software life cycles.

If your vendors can’t answer these questions, you might want to rethink those relationships.

Watch the “Securing the software supply chain” webinar to learn more

Register now

• 47% Potential loss of customer trust
• 36% Poor employee security practices
• 33% Risks from outside breaches
• 14% Unpatched or unpatchable devices

See the full results