EP06 - Transparency & Compliance: How to Secure AI Supply Chains
Building AI: Securing the Future of Artificial IntelligenceShow Notes
What happens when a decade of software supply chain security expertise meets AI's unprecedented challenges? Steve Springett, ๐ฉ๐ถ๐ฐ๐ฒ ๐๐ต๐ฎ๐ถ๐ฟ of the ๐ข๐ช๐๐ฆ๐ฃ ๐๐ผ๐๐ป๐ฑ๐ฎ๐๐ถ๐ผ๐ป and ๐๐ถ๐ฟ๐ฒ๐ฐ๐๐ผ๐ฟ ๐ผ๐ณ ๐ฃ๐ฟ๐ผ๐ฑ๐๐ฐ๐ ๐ฆ๐ฒ๐ฐ๐๐ฟ๐ถ๐๐ at ๐ฆ๐ฒ๐ฟ๐๐ถ๐ฐ๐ฒ๐ก๐ผ๐, reveals why traditional AppSec frameworks can't secure AI systems. From pioneering SBOM initiatives to leading Dependency Track and CycloneDX, discover why AI has accelerated beyond imagination and why transparency, not just compliance, separates trustworthy AI from security theater.
More from Building AI: Securing the Future of Artificial Intelligence
What happens when geopolitical competition shapes where you can build AI teams and which infrastructure you can access? Alessandro Aresu, Geopolitical Analyst and Scientific Advisor at Limes, has spent over a decade analyzing US-China technological competition and advising Italian government institutions, including the Prime Minister's office, on strategic technology issues. From why AI success depends on talent, capital, and companies (not regulations) to why Europe's fragmented approach is ...
What happens when defense-grade testing rigor meets the Wild West of commercial AI deployment? Alex Brooker, Founder of Airside Labs and IET Fellow, spent over a decade building software for defense and aviation systems, and he's now testing enterprise AI for compliance with OWASP, NIST, and the EU AI Act. From why built-in guardrails aren't enough to prevent business liability to why every country needs sovereign AI models, discover what it actually takes to validate AI security at scale.
What happens when strategy consulting meets the trenches of enterprise AI deployment? Dr. Jasper Schwenzow, AI Lead for Defense at deepset, reveals why 70-80% of AI work is unglamorous data cleaning, not magic. From McKinsey to PhD to defense applications, discover why "speaking about the details" separates functional AI systems from expensive demos that never ship.
How do investors separate billion-dollar opportunities from expensive research projects when AI technology changes every six months? Andreas Goeldi, Partner at b2venture, reveals how European VCs evaluate AI infrastructure companies to win in tomorrow's world.
How do you secure AI systems when every prompt could be a potential attack? Sam Watts, Product Lead at Lakera, reveals how enterprises are defending against AI security threats that traditional cybersecurity can't catch. From prompt injection attacks to data poisoning, discover how companies are building the first line of defense in the age of AI agents.