A Conversation You Can’t Refuse With the Godfather of the SBOM

Key Takeaways

Why SBOMs are now mandatory
What pushed the federal government to require SBOMs from software vendors, and why software visibility is now tied directly to national resilience.
Standards are evolving
Why minimum SBOM requirements keep changing, what that shift signals about supply-chain risk, and how teams should adjust their security and procurement practices.
Beyond compliance
How to produce accurate, verifiable SBOMs that hold up in practice and what “resilience” really means when software trust can’t be assumed.