The Supply Chain Threat Model
Where software supply chains break, told through SolarWinds, Codecov, xz-utils and event-stream. And what SLSA was never designed to catch.
WRIGHTBRAINEDSECURITY
Book a call
01 // SLSA FOR ENGINEERS
Your software is a supplier too.
SLSA (pronounced "salsa") is a framework for proving that software hasn't been tampered with between the developer's keyboard and your systems. This self-paced course teaches software teams how to meet it, and teaches buyers what to ask for.
Self-paced
About 40 minutes a lesson
Knowledge checks
Hands-on labs
SLSA v1.2
Ask about the course
Tracks, Levels, and What v1.2 Changed
What a SLSA level actually claims, who is responsible for what, and how to question a vendor's level claim.
Provenance and the Attestation Stack
Read a real build record field by field, then take one apart yourself in the lab.
02 // CMMC TRAINING
What CMMC requires, from someone who assesses it.
What an assessor will actually ask, what counts as proof, and where companies that thought they were ready come up short.
Ask about CMMC trainingFORLeadershipWhat it means for contracts, cost and risk.
FORIT teamsWhat to configure, and what evidence to keep.
FORService providersHow to support clients without owning their risk.
FormatOnline, self-paced
03 // QUESTIONS
Before you sign up.
Is this official certification training?
No. It's practical training from a practicing Lead CMMC Certified Assessor. It won't earn you a credential, but it will prepare you for the real thing.
Can you train our whole team at once?
Yes. Your whole team can take the online course, and I can be available for a live Q&A session with the group.
Do attendees get a certificate of completion?
Yes. Everyone who finishes the course gets a certificate of completion.
// READY WHEN YOU ARE
Is your security posture keeping you up at night?
Thirty minutes, no slide deck. Tell us what you're up against and we'll tell you honestly whether we can help.