SEP 01, 2022 | US
Software Industry Leader BSA Raises Cautionary Notes on Codifying Use of SBOMs
Inside Cybersecurity, September 1, 2022
By Charlie Mitchell
Policymakers should slow the “rush to codify” a requirement for vendors to produce a Software Bill of Materials, according to BSA | The Software Alliance, which says SBOMs can be a useful tool for improving supply chain cybersecurity but won’t provide “a silver bullet” and still need more work before they are mandated in contracts.
“Too many policymakers incorrectly assume that 1) SBOMs and supporting materials are ready for use, if policymakers incentivize a vendor to provide one; 2) organizations, including US Government agencies, are prepared to effectively use SBOMs they receive from vendors; and 3) an SBOM would solve a majority, if not all, of today’s cybersecurity challenges,” BSA policy director Henry Young said in a blog post on Wednesday.
Original Posting: https://insidecybersecurity.com/share/13845
SOBRE A BSA
A BSA | The Software Alliance (www.bsa.org) é a principal defensora do setor global de software perante governos e no mercado internacional. Seus membros estão entre as empresas mais inovadoras do mundo, criando soluções de software que estimulam a economia e melhoram a vida moderna.
Com sede em Washington, DC e operações em mais de 30 países, a BSA promove programas de conformidade que promovem o uso legal de software e defendem políticas públicas que promovem a inovação tecnológica e o crescimento da economia digital.