CISA convenes ‘listening sessions’ to discuss community-led SBOM efforts on cloud, sharing information

The Cybersecurity and Infrastructure Security Agency kicked off an eight-part series Tuesday to hear from stakeholders on how to proceed with community-led Software Bill of Materials work, focusing primarily on “Cloud and online applications” and “Sharing and Exchanging SBOMs.”

The “listening sessions” are broken down into four topic areas and participants were asked to discuss possible subtopic areas, use cases, scoping and potential outcomes. CISA’s Allan Friedman said the goal of the sessions is to “put ideas on the...