+PSS-03.03B

PSS-03.03B

These vulnerabilities are also identified based on data from a list of software components or Software Bill of Materials (SBOM) data.

Supplementary information

Although the cloud service provider has to identify the vulnerabilities based on SBOM data to fulfil this criterion, this SBOM data need not be handed over to the customer to fulfil the criterion.

1. Forbhreathnú

Teideal Caighdeán

1.1 Tagairtí

1.2 Ceanglais aitheanta

1.3 Rialacháin ghaolmhara

2. Ceanglais aitheanta

Ceanglais
Foinse Ceanglas

3. Rialacháin ghaolmhara

Rialacháin
Foinse Rialáil

Saincheisteanna nasctha