SBOM Shake-Up: CISA Calls for Public Input Amid Controversial Changes
CISA is seeking public input on a new SBOM guideline. With changes in leadership and strategy, the agency aims to update its 2021 guidelines to reflect advancements in SBOM tooling and adoption. Public comments are welcomed until October 3, 2025. Let’s hope someone remembers to include a “How to SBOM for Dummies” section!
Hot Take:
Well, folks, it seems the CISA is on a grand quest, asking the world for some input to revamp their SBOM guidelines. If only they could also solve the mystery of why we still get “update available” notifications at the most inconvenient times! It’s like the government is saying, “Help us help you… and maybe a little bit ourselves too!”
Key Points:
- CISA is inviting public comments on updating software bill of materials (SBOM) guidelines.
- The SBOM is a document listing all software components and dependencies used by an organization.
- Previous SBOM guidelines were directed by President Biden’s 2021 Executive Order on cybersecurity.
- Controversy arose in 2022 over SBOM requirements for defense contractors.
- The SBOM community has grown, with increased participation from the open-source sector.
Already a member? Log in here