Re: [open-regulatory-compliance] SBOM implementation help; #SBOM SIG on

["Dick Brooks" <dick@xxxxxxxxxxxxxxxxxxxxxxxxx>]

The EU CRA explicitly refers to SBOM artifacts as part of Technical Documentation under Annex I.

 

A new group has been formed on LinkedIn of SBOM implementers to share information that will help others succeed in their SBOM implementation journey.

 

This group is for people that sincerely want to successfully implement SBOM in practice and share information with others to help them succeed with their SBOM implementations, using SPDX and/or CycloneDX.

https://www.linkedin.com/groups/13274064/

 

Thanks,

 

Dick Brooks

  

Active Member of the CISA Critical Manufacturing Sector,

Sector Coordinating Council – A Public-Private Partnership

 

Never trust software, always verify and report! ™

Risk always exists, but trust must be earned and awarded.™

https://businesscyberguardian.com/

Email: dick@xxxxxxxxxxxxxxxxxxxxxxxxx

Tel: +1 978-696-1788