CISOs already know how to underwrite counterparty risk.
This dinner asks why that same discipline hasn't yet been applied to open-source intake.
Permissionless by Default
Your risk team wouldn't onboard a counterparty without due diligence. Why does engineering still treat public package registries as permissionless by default?
Coverage or the Feeling of Coverage
The latest attacks are built to behave differently under an automated scanner than in production. Is point-in-time scanning still a credible primary control, or a false sense of coverage?
The Gap Nobody Has Claimed
As AI coding assistants enter the pipeline, attackers are already hiding instructions inside the files those assistants trust. Who owns that gap: security, platform engineering, or no one yet?
Four Days to Decide What Is Material
Under NYDFS Part 500 and the SEC's four-day material incident disclosure rule, how fast could you actually determine whether a compromised dependency is "material"?
Does Your Board Use the Words
Has your board ever asked about open-source risk by name, or is it still buried in generic third-party risk?
This is a peer conversation, not a pitch. Come ready to network and discuss.
The evening
One table. Three courses. Off the record.
5:30 pm ET
Drinks Reception
Cocktails and passed hors d'oeuvres
6:30 pm ET
Welcome & Introductions
Framing from your moderator, then round the table
7:00 pm ET
Seated Dinner & Moderated Roundtable
A three-course dinner and a facilitated peer discussion shaped by the room
9:00 pm ET
Evening Concludes
Car service arranged on request
The dinner experience
Every seat carries weight.
There is no stage, no deck and no pitch. Guests are seated at a single table so the conversation stays whole rather than splintering into side discussions.
An experienced moderator keeps things moving under the Chatham House Rule. Numbers are held deliberately low, and every guest is a peer, which is what makes the candour possible.
Featured Speaker
Opening the conversation
Paul brings frontline experience helping large enterprises get control of the open-source and third-party code their business depends on.
Attendance is by invitation only and there is no cost to attend. Dinner and drinks are hosted throughout the evening, and car service can be arranged to and from the venue on request. We review every application to ensure the quality of conversation for all participants.
Invitation only · Off the record · Peer-only conversation
