SBOM (software bill of materials)

[Kaj Wierda]

In May 2022, the White House had issued an Executive Order  (https://www.whitehouse.gov/briefing-room/presidential-actions/2021/05/12/executive-order-on-improving-the-nations-cybersecurity/) to improve cybersecurity that explicitly listed SBOMs as a method to secure the supply chain.

We will be providing an SBOM (software bill of materials - https://www.cisa.gov/sbom ) for Automic Automation as standard, starting the upcoming V21.0.5 (service pack 5) scheduled for January 30, 2023. The SBOM will be included in the download bundle in CycloneDX 1.3 and SPDX formats.

------------------------------
Kaj Wierda
Sr. Product Line Manager | Automation

Broadcom Software
------------------------------

[Peter Grundler]

Hi Kaj,

is this something also discussed/necessary in EU?

regards,
Peter

------------------------------
Automic Certified Professional & Expert & Knight

For AUTOMIC trainings please check https://www.qskills.de/qs/workshops/automic/
------------------------------

[Kaj Wierda]

The European Commission's Cyber Resilience Act (currently in proposal stage) does mention a software bill of materials, see : https://digital-strategy.ec.europa.eu/en/library/cyber-resilience-act for more information.


------------------------------
Kaj Wierda
Sr. Product Line Manager | Automation

Broadcom Software
------------------------------