Learn

Free teaching decks from The Value Chain Risk Institute. Each one explains one idea for people new to it, with speaker notes, and ends with something you can do on Monday. Present them in your browser or download the PDF.

Vendor and supply chain risk

Third-Party Risk 101: Why Vendor Questionnaires Fail

What third-party risk is, why spreadsheet questionnaires miss it, and what better looks like.

Present it · PDF · 12 slides

What Is an SBOM?

The ingredient label for software: what is in one, the two formats, and what to ask your vendors.

Present it · PDF · 11 slides

The EU Cyber Resilience Act in 10 Minutes

What the CRA covers, what it requires, the key dates, and what to do now.

Present it · PDF · 12 slides

Why VCRI?

The problem The Value Chain Risk Institute exists to fix, and the open tools it ships.

Present it · PDF · 12 slides

How the Beacon Collector Works

From a vendor’s own tools to a sealed, scored evidence package a buyer can check, with the evidence never leaving the vendor’s machines.

Present it · PDF · 12 slides

AI security

What Is an AIBOM?

Bills of materials for AI systems: models, data, prompts, tools and memory.

Present it · PDF · 10 slides

What’s in an AI Agent? The Agent Constellation

An agent is many parts that change together. Why you inventory them as one unit.

Present it · PDF · 12 slides

Is Your Agent Still the Agent You Approved?

Agent manifests, drift and reconciliation: checking a running agent against what was approved.

Present it · PDF · 12 slides

AI Cognitive Security 101: When the Attack Is Words

Prompt injection, why it is hard, and the defenses that actually help.

Present it · PDF · 12 slides

Cryptography

Why Quantum Breaks RSA

Shor’s algorithm worked by hand on the number 15, and why post-quantum crypto is different.

Present it · PDF · 13 slides

Use them freely. Teach with these decks in your class, your team meeting or your ISSA, OWASP, BSides or WoSEC chapter. They are licensed CC BY 4.0: share and adapt them, with credit to The Value Chain Risk Institute.

Presenting tips: arrow keys or click to move, F for full screen, N to show speaker notes. Looking for a local group to present to? Try the security group finder. Recorded talks and conference slides are on the Media page.

Decks by Joshua Marpet and Cairn Viktor. Suggestions or a topic you want covered: joshua.marpet@valuechainrisk.org.

Follow The Value Chain Risk Institute: LinkedIn · Bluesky · Mastodon · X (@ValueChainRisk) · Newsletter · GitHub
All tools · Talks and videos · Press kit