SBOM in Regulatory Compliance

Understanding the role of Software Bill of Materials (SBOM) in regulatory compliance

Software supply chain attacks, one of the fastest-growing cybersecurity threats, demand immediate attention and action. In the past five years, nation-states and advanced persistent threat (APT) attackers have accelerated and successfully exploited weaknesses in software supply chains. Data Theorem Enterprise Strategy Group estimates that 91% of organizations have experienced a software supply chain attack in the last year,underscoring the urgent need for action.
‍
After the 2020 SolarWinds exploit, a significant cyberattack compromised numerous organizations, including government agencies, and researchers proposed several frameworks to fortify software supply chains. One such framework is the use of a Software Bill of Materials (SBOM) to standardize visibility into the software supply chain. Multiple regulatory frameworks incorporating SBOM requirements are rolling out globally over the next few years.
‍
In this report, we’ll delve into the regulations that require or benefit from the use of SBOMs, the industries they impact, and the key obligations for companies affected by these regulations.