2026 Minimum Elements for a Software Bill of Materials

policy · policy:cisa-sbom-minimum-elements-2026

Guidance published 29 July 2026 by CISA, the NSA, the FBI and fifteen international co-authoring agencies including BSI, ANSSI and NCSC-NL, replacing NTIA's 2021 SBOM minimum elements: it confirms applicability to open-source, AI and SaaS software and adds component hash value and algorithm, component licence, SBOM author signature, tool name and version, and generation context as required data elements (CISA, 2026-07-29).

Aliases: CISA SBOM Minimum Elements 2026, 2026 SBOM Minimum Elements

Coverage timeline

first 2026-08-09 → last –

no data

Peak priority

no matching entries

Sources cited

0 hosts

Sections touched

Co-occurring entities

no co-occurrence

ATT&CK techniques

no mapped behavior yet

Story timeline

No published entries reference this entity yet.

explore in graph

Entries about 2026 Minimum Elements for a Software Bill of Materials

No published entry references this entity yet · entries match by registry key, by the entity's name or a public alias appearing in the entry title or body, or (for CVE entities) by exact CVE id.