(C07) (INCYBER) Securing the AI & Software Supply Chain: A Google Blueprint

As organizations race to adopt AI, the software supply chain has expanded—it now includes data, models, and weights alongside traditional code. How do you ensure integrity in this complex new ecosystem? This session translates Google’s internal security culture into operational steps for the enterprise. We will explore the major risks on these pipelines, how to apply the SLSA framework to both software and AI pipelines, and harden developer environments. Join us to learn how to build a chain of trust that survives the transition to the AI era.