CISA, Carnegie Mellon launch SBOM harmonization project comparing transparency processes

The Cybersecurity and Infrastructure Security Agency and CMU’s Software Engineering Institute are working together on a project aimed at examining the divergence between Software Bill of Materials outputs across the product development ecosystem.

“Even though SBOMs have been around for a while, there’s certainly been a lot more progress over the last few years, with more companies getting involved in more products, and the standards have been maturing, but there’s still room for improvement,” SEI’s David Tobar told Inside Cybersecurity....