BSidesVienna 0x7EA

Katharina Bisset

I deal with IT law so you can take care of tech.
Mag. Katharina Bisset, MSc is an attorney in Lower Austria, co-founder of the legal tech companies NetzBeweis and Nerds of Law. Before that, she worked for several years in large IT companies. Her areas of expertise are IT, IP, AI-, and data protection law. In addition to her legal education, she holds a MSc in Business Process Management and Engineering. She is also member of the disciplinary council at the Lower Austria Bar Association and a university lecturer.

The speaker's profile picture

Sessions

06-27
10:05
30min
It's Not You, It's Your Dependencies: A Nerdy Lawyer's Guide to the Software Supply Chain
Katharina Bisset

This talk is about SBOM — the thing that has become the most important compliance artifact in software development. I'll cover:

  • Why? A brief, painful tour through the legal plot twists that turned the SBOM from a nice-to-have into a "you literally cannot sell this product without one" because too many discovered they had no idea what they were actually running.
  • What? what actually goes in one, what people think goes in one, why legal and IT security want one, and what happens if you vibe-coded the whole thing.
  • Who? What this all means for software developers, open source maintainers who never signed up to be vendors, and where the liability actually lies.

Expect war stories, regulatory translation services, a healthy amount of "I am not your lawyer, but…", less “it depends” and a takeaway list of things you can actually do on Monday morning — whether you're shipping software, consuming it, or maintaining the one library that all of your products depend on.

Dachsaal (Track 2 - 190 pax)
Dachsaal (Track 2 )