Securing Open-Source Dependencies at Enterprise Scale - Seguridad Mania.com - España y América Latina

Open-source software drives enterprise innovation, but unmanaged vulnerabilities create operational risks and regulatory exposure. As cyber threats evolve and compliance frameworks tighten, executives face mounting pressure to balance innovation speed with robust security governance. Traditional approaches to OSS security often create friction between development teams and security requirements, leading to shadow IT practices and increased exposure. This session presents proven frameworks for integrating security into OSS workflows while maintaining developer productivity and meeting emerging regulatory demands like the EU Cyber Resilience Act. Join Yesenia Yser, Security Engineer and Open-Source Advocate, to explore enterprise-grade strategies for OSS risk management. Key Takeaways: Implement governance frameworks that protect OSS dependencies without slowing development Create shared accountability between security, procurement, and engineering teams Apply SLSA, SBOM, and OpenSSF standards to build enterprise-wide security trust Balance regulatory requirements with collaborative open source community practices Turn OSS security management into a strategic business differentiator