Name: Trust but Verify: Fixing Broken Licensing Compliance in SBOMs - Abdullah Garcia, J.P. Morgan
Start: 2025-06-24T11:40:00+0100
End: 2025-06-24T12:10:00+0100

24 June 2025 | London, England
View More Details & Registration
Note: The schedule is subject to change.

The Sched app allows you to build your schedule but is not a substitute for your event registration. You must be registered for Open Source in Finance Forum London 2025 to participate in the sessions. If you have not registered but would like to join us, please go to the event registration page to purchase a registration.

This schedule is automatically displayed in British Summer Time. To see the schedule in your preferred timezone, please select from the drop-down at the bottom of the menu to the right.

Tuesday June 24, 2025 11:40 - 12:10 BST

Victoria

Ensuring licensing compliance with SBOMs isn’t just about identifying declared licenses: it requires verifying the integrity of the listed components. Without validation through identity assertions and cryptographic hashes, SBOM license data can be incomplete, misleading, or outright incorrect. This session explores how to enhance trust in SBOM-driven compliance by integrating integrity checks, ensuring the software components match their declared identities. Attendees will gain insights into best practices for verifying SBOM data, mitigating legal and security risks, and improving compliance workflows. Join me to learn why an SBOM without integrity verification is meaningless—and how to fix it.

Speakers

Abdullah Garcia

Senior Lead Cybersecurity Architect, J.P. Morgan

Enthusiastic and driven security engineer and architect with over ten years of experience of successful design and delivery of high-quality solutions across a broad range of industry sectors. Interested in security architecture, domain threat and risk analysis, and risk-control... Read More →

Tuesday June 24, 2025 11:40 - 12:10 BST
Victoria

Guarding the Vaults

Open Source in Finance Forum London 2025

Abdullah Garcia

Sign up or log in to save this to your schedule, view media, leave feedback and see who's attending!