A couple-dozen changes to SBOM fields will make them more comprehensive, but some argue that the framework lacks real risk-management improvements.
CISA Issues Fresh SBOM Guidance. Did They Get It Right?
Summary + source link. No paywalls, no tracking.