Ms. Christine Gadsby reports

BLACKBERRY ANNOUNCES FIRST OPENCHAIN SECURITY ASSURANCE SPECIFICATION CONFORMANCE IN THE AMERICAS

BlackBerry Ltd. is the first business in the Americas to gain the Openchain security assurance specification, a best-in-class validation of the company's ability to manage open-source vulnerabilities and risks as part of its software supply chain, with a view to providing a higher level of security assurance for customers.

BlackBerry announces first Openchain security assurance specification conformance in the Americas

The Linux Foundation's Openchain project works to establish trust in open-source software. Use of the Openchain security assurance specification will enable BlackBerry customers to have increased confidence in the company's ability to manage the use of open-source software across its cybersecurity and IoT (Internet of things) product portfolios.

"Building a more resilient and trusted software supply chain is critical to the future of secure software, and BlackBerry is proud to be a leader in this space," said Christine Gadsby, vice-president of product security at BlackBerry. "We're committed to adopting a higher standard for our software supply chain as cyberattacks grow and stringent regulatory standards come into effect."

"Cyberattacks are increasing in frequency, severity and sophistication. Securing software supply chains is a priority for organizations of all sizes in all industries as they look to reduce their overall business risk profile," said Frank Dickson, group vice-president of security and trust at IDC. "Protecting sensitive data is paramount in achieving this objective, particularly in the face of potential financial loss and reputational damage. Following respected third party standards and specifications is an excellent way for organizations to communicate and demonstrate a commitment to current best practice security processes and sustainability of their approach in moving forward."

The milestone builds on BlackBerry's previous adoption of Openchain ISO/IEC 5230:2020, the international standard for open-source licence compliance, which defines the key elements of a quality open-source compliance program and allows companies of all sizes and sectors to adopt them.

"BlackBerry has one of the deepest commitments in the security industry to bringing increased peace of mind to enterprise and governmental organizations," said Russ Eling, chief executive officer, OSS Consultants, who worked with BlackBerry to gain the new accreditation. "This added certification highlights BlackBerry's position as a trusted supply chain vendor and serves as an example for others to follow. BlackBerry was able to meet the specification through its existing policies and processes due to its long history and commitments to responsible management of open-source. BlackBerry has a team of experts who have developed their practices, tooling and operational capability to manage the vulnerabilities that arise within open-source libraries."

About BlackBerry Ltd.

BlackBerry provides intelligent security software and services to enterprises and governments around the world. The company secures more than 500 million end points, including 215 million vehicles. Based in Waterloo, Ont., the company leverages AI (artificial intelligence) and machine learning to deliver innovative solutions in the areas of cybersecurity, safety and data privacy solutions; it is a leader in the areas of end point security, end point management, encryption and embedded systems. BlackBerry's vision is clear -- to secure a connected future you can trust.