Document ID:

DI-SESS-82433       Scroll down to access document images

Overview

Title:  Cybersecurity Supply Chain Risk Management (C-SCRM) Software Bill of Material (SBOM) Requirements Scope:  Data delivered using this Data Item Description (DID) specifies the requirements for a Software Bill of Materials (SBOM) that includes comprehensive software component information and upstream relationship assertions in alignment with CISA and NTIA guidelines. The SBOM will ensure suppliers/vendors maintain and/or improve Cybersecurity Supply Chain Risk Management (C-SCRM) activities. This approach provides a consistent and repeatable approach for sharing product component data. Status:  Active DID Date:  19-JAN-2024         Next Review Due:  17-JAN-2029 FSC/Area:  SESS Doc Category:   Data Item Description

Responsibilities

DID Approval Authority:  SA  Navy Supply Systems Command   Preparing Activity: AS  Naval Air Systems Command DoD Interest Level:  / Prepared by DoD activity Coordination:  Full

Revision History

Click on column headings for a description of column content.

NOTE: It is recommended that you use Adobe Reader v7.0 or higher for optimal download performance; older versions should continue to work, but downloading large files may appear to take longer, so please be patient in those cases.