SBOM Consumer Briefings: Current State, Strategy, and Emerging Use Cases (A20b)
This multi-speaker talk examines the practical use of software bills of materials (SBOMs) from the perspective of consumers—organizations that consume, analyze, and act on SBOM data. Presenters will share lessons learned from
- implementing SBOM submission and review processes,
- challenges encountered by evaluators, laboratories, vendors, and product developers,
- how vulnerability analysis and monitoring affects evaluations.
Speakers will cover how NIAP utilizes an SBOM tool to assist in evaluations, including alerts and SBOM comparisons. They will also cover emerging use cases including cryptographic BOMs (CBOMs) for identifying post-quantum risks, hardware BOMs (HBOMs), and AI BOMs.
Participants will gain a clearer understanding of consumer needs, where current practices fall short, and how organizations can turn SBOM data into actionable information for product assurance, vulnerability monitoring and management, and long-term risk reduction.