Subject: [Suit] Request for Comment on "Minimum Elements of SBOM" for Cybersecurity EO

From: Russ Housley <[email-masked]>
Date: Fri, 28 May 2021 12:24:25 -0400

This may be of interest to the people on this mail list.

> From: "Friedman, Allan" <[email-masked]>
> Subject: Request for Comment on "Minimum Elements of SBOM" for Cybersecurity EO
> Date: May 28, 2021 at 12:10:21 PM EDT
> To: "Remaley, Evelyn" <[email-masked]>
> Cc: PRESS <[email-masked]>
> 
> Dear Stakeholders,
>  
> The Executive Order on Improving the Nation’s Cybersecurity directs the Department of Commerce and NTIA to publish the minimum elements for a Software Bill of Materials (SBOM).  Following this EO, NTIA is requesting comments on the minimum elements for an SBOM, and what other factors should be considered in the request, production, distribution, and consumption of SBOMs.
>  
> The Request for Comments offers an initial proposal for the minimum elements for feedback, building on existing work from the community. This approach centers on three broad, inter-related areas: data fields, operational considerations, and support for automation. Focusing on these three areas will enable an evolving approach to software transparency, and serve to ensure that subsequent efforts will incorporate more detail or technical advances. The Request also asks about a range of related issues that may require consideration for broader SBOM implementation. 
>  
> The Request is attached in PDF form and posted here: https://www.ntia.gov/federal-register-notice/2021/notice-rfc-software-bill-materials-elements-considerations.
>  
> The deadline for Comments will be 15 days after the official publication in the Federal Register. We will share an update after official publication to give the exact due date.  
>  
> Please don't hesitate to reach out if you have any questions.
>  
> allan
>