Date and time: 21 October 2026, 11:00 a.m. - 12:00 p.m. ET

Join William O'Connor, CSSLP, DevSecOps Technical Program Manager at Rockwell Automation and Peter Thermos, CEO, Palindrome Technologies for "Never trust, always verify. How SBOM’s can Make or Break Your Reputation" on Wednesday, 21 October at 11:00 am ET (New York time).

Software Bills of Materials (SBOMs) are becoming an increasingly important part of cybersecurity and software supply chain management—but simply generating an SBOM does not guarantee its quality, accuracy, or usefulness. In this webinar, William and Peter will examine SBOM quality from two complementary perspectives: the supplier responsible for producing an SBOM and the certifier evaluating its reliability and value.

The Supplier Perspective: William O’Connor will discuss the importance of establishing a process to review generated SBOMs against the actual product for completeness and correctness, including identifying missing components, versions, licenses, and other information. Today, SBOMs are only as good as the tools that generate them. Until tooling improves, organizations should have a quality gate in place to ensure an SBOM meets established requirements before it is considered complete.

The Certifier Perspective: Peter Thermos will then examine SBOMs from the certifier’s viewpoint, including how they can accelerate vulnerability identification and analysis, patching, and remediation. He will also address both their value, but also their current limitations. He will cover why SBOMs do not replace secure development, risk assessment, threat modeling, security analysis, rigorous penetration testing, or patch management. While focusing on how the SBOM can provide  value.

Following William and Peter's individual presentations, we'll move into a robust discussion and audience Q&A providing an opportunity to explore both perspectives and discuss what organizations should consider when developing, evaluating, and using SBOMs. 

This is a complimentary ISA and ISA Global Cybersecurity Alliance (ISAGCA) webinar.  Register today!

Presenters: William O'Connor 

Title: DevSecOps Technical Program Manager

Organization: Rockwell Automation

Bio: William O'Connor, CSSLP, is a DevSecOps Technical Program Manager at Rockwell Automation with more than two decades of experience in the ICS and avionics industries. He leads initiatives in enterprise security tooling, software supply chain security, SBOMs, security requirements, and automated compliance. William helps product and DevSecOps teams transform security and regulatory requirements into scalable workflows that streamline compliance and reduce software risk. 

Presenters: Peter Thermos 

Title: Founder & CEO

Organization: Palindrome Technologies

Bio: Peter has over 25+ years of experience in consulting and research in several areas of Information Security and Assurance and has held senior technical and management positions with Telcordia Technologies (previously known as Bellcore). During his career Peter conducted security research and provided cyber security advisory support for various commercial and government organizations including the Laboratory for Telecommunication Sciences, NIST, Federal Reserve Bank, Department of Labor, Verizon Wireless, Sprint, among others, and cyber preparedness for the Athens 2004 Olympics. Peter ihas been a speaker at various industry conferences (i.e. IEEE, ICIW, SANS, Blackhat, MIS InfoSec, ISSE, ISA ASE), NATO NMIOTC Cybersecurity conference, and has published research papers in academic and industry journals and articles in trade magazines such as Information Security, ZDNET, Forbes, TechTarget and Wired. Peter holds a Master’s degree in Computer Science from Columbia University, NY and he is an ISASecure member and a senior member of IEEE and ISSA.