CYB-201Cybersecurity & Threat
Software Supply Chain: SBOMs, VEX and Component Monitoring in Practice
What you leave with
An SBOM programme: generation, ingestion, CVE matching, VEX handling, staleness rules and vendor SBOM requests.
Same obligation, two realities
Early-stage and SMEgenerate your own SBOM and answer customers.
Enterpriseingest vendor SBOMs at scale and route CVEs to remediation.
How the course runs
- The obligation: where the responsibility comes from, cited by section.
- Two realities: how it is met in a small organisation and in an enterprise.
- The method: step-by-step practice with templates and edge cases.
- Paired labs: complete the one matching your work, read the other.
- Artefact and assessment: submit the artefact; a rubric and a short scenario quiz decide the certificate.