CISA Releases Draft Changes To Sbom Minimum Requirements For Comment
SC Media, Friday, August 22nd, 2025
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a new draft guide for software bills of material (SBOMs) that makes several major updates to the minimum elements first published in 2021.
The 2025 SBOM Minimum Elements draft document, released for public comment on August 22, 2025, aims to adapt SBOM adoption to the evolving tools, practices and expectations of the last four years.
SBOMs serve as a 'list of ingredients' for software components that help purchasers and adopters of these components understand their software supply chain risk and exposure to potential vulnerabilities among dependencies.