2.2.1 SBOM Lifecycle Phases

Figure 1 depicts the conceptual perspective of the SBOM lifecycle aligned with the key principles of SBOM. The lifecycle begins with the software build and SBOM generation based on the necessary sources of information, progresses to the SBOM validation to assess the quality of the generated SBOM, followed by cryptographic signing to protect its integrity and authenticity, secure storage, operational consumption and continuous maintenance and updates.

Figure 1 - SBOM Lifecycle

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

3. Related Regulations

• ENISA -