DevSecOps Days Washington, D.C. 2026

Modern systems are no longer just software and hardware, instead, a wide variety of artifacts—including AI models, data sets, and services—participate in the supply chain, opening many new vectors for exploits. Obtaining and maintaining accurate metadata is going to be key to efficiently managing the intelligence and processes required to keep modern systems safe and secure. This talk will review some of the best practices identified so far, and discuss how ISO/IEC DIS 5962 and future versions of SPDX will help facilitate the collection and analysis of key metadata for systems with safety elements to be managed.