Episode 61: Chris Butera, CISA, FIRSTCON26 Speaker

Recorded live at FIRSTCON26 in Denver, Colorado, this episode of FIRST Impressions, features an interview with Chris Butera, acting Executive Assistant Director for Cybersecurity at CISA (Cybersecurity and Infrastructure Security Agency), the local host of the conference. Chris shares how CISA serves as America’s cyber defense agency, protecting federal, state, local, tribal, and territorial government systems while working closely with industry partners across the cybersecurity ecosystem. The conversation explores the rapidly evolving vulnerability landscape, including, the growth of the CVE Program from 26 CVE Numbering Authorities to more than 500 worldwide; why CVEs remain the authoritative global system for identifying and tracking software vulnerabilities; the role of Software Bills of Materials (SBOMs) in managing software supply chain risk; new efforts to create AI-specific SBOM standards through the G7 AI SBOM Minimum Elements initiative, and more! Take a practical look at how vulnerability management, supply chain security, AI governance, and workforce development are becoming increasingly interconnected, and why these initiatives matter to every organization operating in today’s threat environment.