Supply Chain Security: Policies at Scale

In this session we will review the challenges of enacting SSC policies in large enterprises. We will discuss the relationship between policies and ownership and describe the technical challenges and tradeoffs applied to large organizations. We will cover categorization of applications and the challenges in waiver management, sandbox testing and no known fixes for CVEs. We will also discuss active/active setups and its implications for policy management and automated actions.