Software Bill of Material (SBOM) Basics, assessments, prospects

Cybersecurity requirements are increasingly becoming a regulatory focus. The interest in instruments that make it possible to improve quality and processes in the (software) supply chain is therefore increasing for these reasons, among others. Software bills of materials (SBOMs) are seen as one such instrument. A software bill of materials contains information about the software components used and can be seen as an important building block of software supply management. It can be used to achieve transparency about the software components used and based on this, improve cyber security along the supply chain.

Before considering the further use and implementation of SBOM, a common understanding of SBOM should be developed by both industry stakeholders and regulators. This paper aims to contribute to this understanding from the perspective of the electrical and digital industry.

Download