Software Bill of Materials Framework: Leveraging SBOMs for Risk Reduction
• SEI Report
Publisher
Software Engineering Institute
Abstract
SBOMs are becoming crucial in managing software and systems risk and resilience. There are multiple efforts underway to expand the use of SBOMs. One driving factor is the reference to SBOMs in EO 14028. More importantly, there is wide and growing recognition that the risks posed by a lack of transparency in software must be addressed to help ensure security and promote resilience in systems.
The practices and processes outlined in this SBOM Framework can provide a starting point to build that structure for SBOM efforts. The SBOM Framework addresses the establishment of processes to manage multiple SBOMs and the vast data that they can provide; however, those processes will likely require further tuning as pilot-related activities provide input about improvements and tooling.
This SBOM Framework can help promote the use of SBOMs and establish a more comprehensive set of practices and processes that organizations can leverage as they build their programs.
Part of a Collection
Acquisition Security Framework (ASF) Collection
Cite This SEI Report
Wallen, C., Alberts, C., Bandor, M., & Woody, D. (2023, June 14). Software Bill of Materials Framework: Leveraging SBOMs for Risk Reduction. Retrieved September 11, 2026, from https://www.sei.cmu.edu/library/software-bill-of-materials-framework-leveraging-sboms-for-risk-reduction/.
@techreport{wallen_2023,
author={Wallen, Charles and Alberts, Christopher and Bandor, Michael and Woody, Dr. Carol},
title={Software Bill of Materials Framework: Leveraging SBOMs for Risk Reduction},
month={Jun},
year={2023},
institution={Software Engineering Institute, Carnegie Mellon University},
url={https://www.sei.cmu.edu/library/software-bill-of-materials-framework-leveraging-sboms-for-risk-reduction/},
note={Accessed: 2026-Sep-11}
}
Wallen, Charles, Christopher Alberts, Michael Bandor, and Dr. Carol Woody. "Software Bill of Materials Framework: Leveraging SBOMs for Risk Reduction." Software Engineering Institute, Carnegie Mellon University. Software Engineering Institute, June 14, 2023. https://www.sei.cmu.edu/library/software-bill-of-materials-framework-leveraging-sboms-for-risk-reduction/.
C. Wallen, C. Alberts, M. Bandor, and D. Woody, "Software Bill of Materials Framework: Leveraging SBOMs for Risk Reduction," Software Engineering Institute, Carnegie Mellon University. Software Engineering Institute, 14-Jun-2023 [Online]. Available: https://www.sei.cmu.edu/library/software-bill-of-materials-framework-leveraging-sboms-for-risk-reduction/. [Accessed: 11-Sep-2026].
Wallen, Charles, Christopher Alberts, Michael Bandor, and Dr. Carol Woody. "Software Bill of Materials Framework: Leveraging SBOMs for Risk Reduction." Software Engineering Institute, Carnegie Mellon University, Software Engineering Institute, 14 Jun. 2023. https://www.sei.cmu.edu/library/software-bill-of-materials-framework-leveraging-sboms-for-risk-reduction/. Accessed 11 Sep. 2026.
Wallen, Charles; Alberts, Christopher; Bandor, Michael; & Woody, Dr. Carol. Software Bill of Materials Framework: Leveraging SBOMs for Risk Reduction. Software Engineering Institute. 2023. https://www.sei.cmu.edu/library/software-bill-of-materials-framework-leveraging-sboms-for-risk-reduction/