SEP 01, 2022 | US
Software Industry Leader BSA Raises Cautionary Notes on Codifying Use of SBOMs
Inside Cybersecurity, September 1, 2022
By Charlie Mitchell
Policymakers should slow the “rush to codify” a requirement for vendors to produce a Software Bill of Materials, according to BSA | The Software Alliance, which says SBOMs can be a useful tool for improving supply chain cybersecurity but won’t provide “a silver bullet” and still need more work before they are mandated in contracts.
“Too many policymakers incorrectly assume that 1) SBOMs and supporting materials are ready for use, if policymakers incentivize a vendor to provide one; 2) organizations, including US Government agencies, are prepared to effectively use SBOMs they receive from vendors; and 3) an SBOM would solve a majority, if not all, of today’s cybersecurity challenges,” BSA policy director Henry Young said in a blog post on Wednesday.
Original Posting: https://insidecybersecurity.com/share/13845
ABOUT BSA
BSA | The Software Alliance (www.bsa.org) is the leading advocate for the global software industry before governments and in the international marketplace. Its members are among the world’s most innovative companies, creating software solutions that help businesses of all sizes in every part of the economy to modernize and grow.
With headquarters in Washington, DC, and operations in more than 30 countries, BSA pioneers compliance programs that promote legal software use and advocates for public policies that foster technology innovation and drive growth in the digital economy.