The CERT-In Technical Guidelines (v2.0, July 2025) mandate that all government, public sector, essential services, and software export/service organizations adopt Software Bill of Materials (SBOMs) as a standard practice in software development and procurement to strengthen supply chain security. The directives require that software supplied to these entities must be accompanied by a complete SBOM (in SPDX or CycloneDX format), covering details like components, versions, licenses, vulnerabilities, and patch status. CERT-In further emphasizes continuous SBOM updates, secure storage and sharing, integration with vulnerability databases, and use of VEX/CSAF advisories for transparent vulnerability reporting. Alongside SBOM, the guidelines extend to QBOM (Quantum), CBOM (Cryptography), AIBOM (AI), and HBOM (Hardware) to address risks in emerging technologies, ensuring India’s critical infrastructure and digital ecosystem remain resilient against evolving cyber threats. Nivetha N
Bill of Materials (BOMs) are emerging as powerful enablers of proactive security governance. They are no longer just technical inventories, but offer deep visibility, helping organisations secure increasingly complex technology ecosystems, while protecting both physical and digital assets. As organisations navigate increasing complexity, BOMs offer clarity, control and confidence. Explore how BOMs can transform cybersecurity from reactive to proactive in our latest report: https://lnkd.in/gYB5dChS #RethinkRisk #FitForFuture #BoMGovernance #Cybersecurity #EmergingTechnologies Sivarama Krishnan | Siddharth Vishwanath | Sundareshwar K (Sundar) | Praveen Sasidharan | Vivek Venugopal