NTIA working group draft paper examines security benefits of 'software bill of materials'

The National Telecommunications and Information Administration has released a draft working group paper on supply-chain security that examines the benefits of a “software bill of materials” for producing, choosing and operating software.

“Software permeates banking, healthcare, utilities, emergency services, national defense, government systems, and the like,” according to the eagerly awaited working group paper released Tuesday, laying out what's at stake in securing software.

“Software includes operating systems, firmware, and embedded systems within our gadgets, devices, IoT, and other...