The era of accepting open source software risk as the "cost of doing business" is over. Join FINOS Gold Member Chainguard and Field CISO John Sapp on October 14 at 10:00 a.m. ET to learn how frontier AI models surface vulnerabilities faster than legacy processes can patch them. Register for the Webinar Here to secure your spot and learn how to reduce risk without disrupting business-critical systems

Event Overview For decades, financial institutions managed open source software risk by simply accepting it. Legacy applications, strict change control, and the operational risk of touching business-critical systems made a growing CVE backlog a given. Today, that calculation no longer holds, and regulators, auditors, and customers demand stronger evidence of software integrity. We will explore why reactive vulnerability management is breaking down and the practices security and platform leaders can use to establish a more secure, governed approach to open source consumption.

Key Discussion Topics

• Why frontier AI is making previously accepted open source vulnerabilities more urgent.
• Why vulnerability exploitation has overtaken phishing as a leading FinServ attack vector.
• Best practices for governing open source consumption and vulnerability remediation in regulated environments.
• Reducing risk without forcing disruptive upgrades to business-critical applications.
• Building stronger software integrity and audit evidence into the software lifecycle.

Who Should Attend

This session is highly recommended for CloudSec, AppSec, ProdSec, and GRC leaders, including CISOs, VPs of Security, and Compliance Managers looking to modernize their enterprise risk posture.

Meet the Speaker: John Sapp, Field CISO, Chainguard

John is Chainguard's Field CISO, bringing over 35 years of experience across IT, cybersecurity, and enterprise risk management. A seasoned CISO and trusted advisor to executive teams and Boards of Directors, he specializes in translating complex security challenges into clear business context and driving risk-informed decisions across stakeholders.

Looking Ahead: OSFF New York If you are attending the Open Source in Finance Forum (OSFF) in New York this November, Chainguard will be presenting there as well. Be sure to check out Dan's upcoming speaking session on the OSFF Schedule.