Root (formerly Slim.AI) aids organizations in managing software risk and meeting NIST Cybersecurity Framework (CSF) 2.0 guidelines by offering a platform for continuous monitoring and streamlined collaboration. In this show, Ian Riopel, CEO of Root, gives us an overview of the solution and how it is addressing software security challenges. He details the NIST’s (CSF) 2.0 framework and explains how Root supports organizations in adapting to these new requirements. He says, “There’s an opportunity for us to play a major role, just given our background and history and understanding around the complexities with containerized software.”

Root addresses the challenges of managing software vulnerabilities and supply chains

• Root emerged from Slim.AI, which initially specialized in container optimization and hardening. Customer feedback indicated a need for better management of software vulnerabilities and supply chains which Root aims to address.
• The creation of Root is driven by new market opportunities and regulatory requirements, like NIST’s emphasis on Software Bill of Materials (SBOM) tracking. Riopel explains how Root aims to address these evolving needs.

How Root is helping organizations navigate NIST’s CSF 2.0 guidance

• Riopel provides an update on NIST’s new CSF 2.0 guidance, which introduces continuous monitoring and governance for software supply chains. The industry must now track software security throughout its lifecycle, not just at a single point in time.
• Riopel explains that NIST 2.0 requires ongoing collaboration between software producers and consumers. He notes that Root streamlines risk assessments and communication, reducing inefficiencies compared to traditional methods.
• Traditional methods involving emails and spreadsheets are replaced by Root’s streamlined process, with features like Vulnerability Exploitability eXchange (VEX) statement generation to simplify vulnerability management.
• Root utilizes AI internally and in its market strategies, with ongoing exploration of AI integration into its solutions. Riopel underscores that AI is crucial for maintaining industry relevance.

Guest: Ian Riopel (LinkedIn)
Company: Root (LinkedIn)
Show: Let’s Talk

This summary was written by Emily Nicholls.