The other day we were talking about the CRA and SBOMs. It’s quite clear that the manufacturer needs an SBOM, but what type of SBOM do they mean? CISA has defined many types of SBOMs and it wasn’t clear to us what they referred to. Another question is if the CISA list of types is too complex and if we should redefine it. One things was clear to us, one type of SBOM is missing from the list.
Listen to our discussion on youtube and give us feedback!
In today’s complex software landscape producing digital products, the Software Bill of Materials (SBOM) has emerged as a crucial tool for understanding the components within our applications. Organisations are increasingly adopting them, driven by security Read more…
In a series of posts on LinkedIn, we have published the Zen of SBOM. This is a series of posts with a little bit of humour, but also some serious advice on how to take Read more…
Are you ready for the EU Cyber Resilience Act (CRA)? SBOM Europe will host two one-day training courses this spring, one in Manchester, UK and one in Stockholm, Sweden. Register today to get up to Read more…