CISA’s AI SBOM (AI Software Bill of Materials) Guidance—A new standard for software supply chain management

Cybersecurity and Infrastructure Security Agency (CISA) and G7 cyber agency partners have published a list of minimum elements for an AI SBOM (AI Software Bill of Materials). It will help CISOs assess the security and provenance of AI systems deployed in corporate environments. The guidance extends the traditional SBOM (software bill of materials) concept to AI, requiring documentation of models, datasets, software components, providers, licenses, and other dependencies.