Tag: SPDX
CISA’s 2026 SBOM Guidance Adds Hash Requirements and AI Coverage
Tom Smith | | AI supply chain security, CISA, CISA SBOM 2026, CMMC, component hashes, component licensing, continuous SBOM validation, CycloneDX, FBI, FedRAMP, NSA, open source security, SaaS security, SBOM automation, SBOM minimum elements, software bill of materials, software procurement, Software Supply Chain Security, software transparency, SPDX, vendor risk managementCISA’s updated 2026 SBOM minimum elements expand software transparency requirements to AI, SaaS and open source while adding hashes, licenses and stronger validation ...
