DEVOPSdigest

Synopsys announced a new partnership with The Chertoff Group, a global advisory services firm that applies security expertise, technology insights, and policy intelligence to help clients build resilient organizations, gain competitive advantage, and accelerate growth.

Synopsys partners with key solution providers worldwide to help customers build more secure software faster. This partnership with The Chertoff Group brings industry-leading solution providers together to deliver application security solutions that help customers build trust in their software. Customers can now take advantage of The Chertoff Group's advisory services and Synopsys' application security domain expertise to ensure a smooth execution of cloud migration and digital transformation projects.

"The Chertoff Group's partnership with Synopsys is powerful because it combines market-leading software security and cyber risk management capabilities," said David London, a Managing Director at The Chertoff Group. "As we've learned from the spate of disruptive technology supply chain compromises, organizations must unify their approach to product security with enterprise cyber defense. By combining The Chertoff Group's cyber risk capabilities with Synopsys' software security expertise, we help clients overcome that compounded challenge."

Partnership highlights include:

- Timely cyber policy insight that drives coordinated enterprise and product-level security direction

- Unified threat modeling that reflects adversary behavior and facilitates better defensive coverage and prioritized countermeasures

- Technical testing and validation outcomes translated into business context that enables leadership to better understand and defend against cyber security risks

"Organizations are increasingly realizing that software risk equates to business risk," said Tom Herrmann, VP of Channels and Alliances at the Synopsys Software Integrity Group. "This is a central focus of the partnership between Synopsys and The Chertoff Group, which was born out of a desire to educate organizations on policies and standards and how they can be directly applied to development and deployment teams."