Skip to content

Back to the catalog

enisa.europa.euadvisory

ENISA Technical Advisory for Software Bill of Materials

ENISA Technical Advisory for Software Bill of Materials | ENISA

ENISA Technical Advisory for Software Bill of Materials is practical guidance on SBOM adoption for organizations, especially micro, small and medium enterprises and open-source stewards. It sets out an SBOM implementation architecture and data flows across a defined lifecycle, an indicative SBOM threat model with targeted risks, and measures for the SBOM ecosystem. It aligns with the ENISA Secure by Design and Default Playbook and supports Cyber Resilience Act compliance.

TL;DR ENISA guidance for SMEs on adopting SBOMs, with a lifecycle architecture, threat model and mitigations.
Open original ↗

Organisations named here

  • ENISA
  • ENISA Secure by Design and Default Playbook
  • EU Cyber Resilience Act

Technologies named here

  • ENISA draft SBOM Landscape Analysis
  • SBOM

Techniques named here

  • SBOM adoption to improve software supply chain transparency
  • SBOM threat modelling
  • Secure by design and default principles
  • Cyber resilience maturity assessment for SMEs

Related in Supply Chain