Tag: CycloneDX

CISA publishes Software Acquisition Guide to add software assurance in C-SCRM lifecycle

CISA publishes Software Acquisition Guide to add software assurance in C-SCRM lifecycle

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) recently released a guide that consolidates relevant software assurance guidance and frameworks into a single document and enables stakeholders to navigate through these requirements in a clear, concise manner. The Software Acquisition…

CISA releases HBOM framework for supply chain risk management to help purchasers assess, mitigate risks

CISA releases HBOM framework for supply chain risk management to help purchasers assess, mitigate risks

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) published Monday its Hardware Bill of Materials (HBOM) framework for Supply Chain Risk Management. This document introduces an HBOM framework that creates a consistent, replicable avenue for vendors to engage with purchasers…

software components

NTIA makes significant changes for development of a model for SBOMs, including software components

The Framing working group of the National Telecommunications and Information Administration (NTIA) has published a document that lists significant changes for the development of a model for a Software Bill of Materials (SBOM) that delivers a machine-readable inventory of software…