Dan Lorenc, Chainguard
This interview at Chainguard Assemble 2026 examines securing the modern software supply chain and artificial intelligence-driven development. John Sapp of Texas Mutual Insurance Company appears on theCUBE Research with hosts Rebecca Knight and Paul Nashawaty. The conversation addresses the evolving role of the Chief Information Security Officer and approaches to modernizing the secure software development life cycle. Sapp emphasizes that CISOs must enable secure, responsible AI adoption through governance, inventorying software components and embedding security by design. They recommend shifting security left, reducing developer remediation time and measuring return on investment for supply chain controls. Nashawaty highlights Chainguard as an emerging application security innovation that automates lifecycle visibility and helps organizations achieve near-zero Common Vulnerabilities and Exposures. Topics covered include supply chain security, secure software development life cycle, AI-driven development, open source security, developer experience and strategies for measuring security ROI. The discussion provides practical guidance and strategic considerations for organizations balancing speed and security in modern software delivery.