Former Federal CISO Schneider: SBOM can be helpful, but questions remain over intended use

Leveraging a Software Bill of Materials can be helpful to determine what is in an organization’s supply chain, according to former Federal CISO Grant Schneider, but he argued that there are some lingering questions over intended use that raise a red flag over making it a requirement now for procurement.

Neither industry nor government is “ready to mandate SBOM,” Schneider said. “There are still a lot of questions around how they are going to be leveraged operationally by agencies, how...