Software Bill of Materials (SBOM)
Strengthen Security by Identifying and Managing Risks in the Software Supply Chain
Why Are SBOMs Important?
A Software Bill of Materials is a list of all the open-source and third-party components and services present in a project. Details about each component and service, such as version and license information, can be found in an SBOM. This information allows for quick identification of a variety of risks such as vulnerabilities, maintenance and license risk. Additional benefits of an SBOM include:
- Transparency: Organizations are more aware of the component parts of their software and can make better security decisions based on that knowledge.
- Vulnerability Tracking: Known vulnerabilities for each component can be tracked as software updates are made, resulting in a more accurate understanding of a project's overall risk.
- Auditing: Knowing a project's component parts and any related risks ensures that only authorized dependencies are included.
The bottom line is that SBOMs are an integral part of the FDA eSTAR. Section 524B(b)(3) of the FD&C Act requires that manufacturers of cyber devices provide a SBOM when filing. Contact us if you want to learn more about Adaptiv Risk's SBOM capabilities.