Podcast

Firmware SBOMs, Zero Trust & IoT Truth Bombs with Tom Pace

For the last twenty years we’ve invested in software security without parallel development in firmware security. Why is that? Tom Pace, co-founder and CEO of NetRise, returns to Error Code to discuss the need for firmware software bills of materials, and why Zero Trust is a great idea yet so poorly implemented. As in Episode 30, Tom is a straight shooter, imparting necessary truth bombs about our industry. Fortunately he’s optimistic about our future.

Listen Now

Speakers

Thomas Pace

Co-founder & CEO, Netrise

Key Takeaways

Firmware security has lagged for decades:
The episode spotlights how software security investment hasn’t been matched by firmware security progress—and why that imbalance matters as firmware becomes a high-value attack surface.
Firmware SBOMs are a missing foundation:
Tom Pace argues that firmware software bills of materials are essential to understand what’s inside devices and to manage supply-chain risk with evidence, not assumptions.
Zero Trust is strong in theory, weak in execution:
The conversation frames Zero Trust as a great idea that’s often poorly implemented in practice—plus “truth bombs” on what the industry gets wrong, delivered with an optimistic view of where things can go.

Firmware SBOMs, Zero Trust & IoT Truth Bombs with Tom Pace

Speakers

Key Takeaways

Firmware security has lagged for decades:

Firmware SBOMs are a missing foundation:

Zero Trust is strong in theory, weak in execution:

Stay up to date with the news

EU Cyber Resilience Act Data Sheet

EU Cyber Resilience Act (CRA): Scope, Timelines, and Requirements

A Conversation You Can’t Refuse With the Godfather of the SBOM