Duration: 0:00

12 views

0

As part of the Adoptiums project commitment to ensuring a secure supply chain for the Temurin JDK is ever more vital. As part of this commitment, an external auditor was appointed to audit the Adoptium projects critical code & software repositories, aiming to validate our security processes, and thus, mitigating risks, and enhancing overall cybersecurity posture. This presentation aims to delve into the intricacies of participating in an external security audit, offering insights, addressing common challenges, and providing an engineer's view of the experience. The presentation will cover the preparation and scope definition process for the audit itself, and then continue on to the audit execution process, and the resulting actions, before finally covering the wrap-up, and the post-audit actions. This session will provide insights to others about what is involved in this critical process. This is intended to be a 30-minute presentation, based on recent experiences with an external security audit.