1.2 Scope and Context

This technical advisory is intended for guidance purposes only. The recommendations and best practices described herein are non-mandatory and do not create or modify any legal, regulatory, or compliance obligations.

The scope of this technical advisory is limited to Software Bill of Materials and does not cover other emerging Bill of Materials (BOM), such as Software Bill of Materials for AI, Hardware Bill of Materials (HBOM), Cryptographic Bill of Materials (CBOM) or other variants. While all artifacts may share some common principles, they also have differentiators and therefore are considered out of scope for this advisory.

This technical advisory remains sector-agnostic and applicable across all types of organisations regardless of their operational environment or industry. It is primarily focused on organisations that are at the early stage of SBOM adoption, and it does not provide a framework for assessing and improving organisational maturity. Future editions may cover the topic more extensively.

1. Pārskats

1.1 Atsauces

1.2 Identificētās prasības

1.3 Saistītie tiesību akti

2. Identificētās prasības

3. Saistītie tiesību akti

• ENISA -