Software Bill of Materials (SBOM)

Supporting SBOM adoption across the energy sector community

The Energy Sector Software Bill Of Materials (SBOM) Proof of Concept (POC) effort is a partnership between DOE CESER and the U.S. Department of Homeland Security Cybersecurity and Infrastructure Security Agency (CISA) to develop and explore the application of SBOMs within energy sector environments. Using an open, transparent, consensus-based process, this diverse stakeholder group is developing tools, technologies, and use cases to catalyze SBOM adoption by technology vendors and asset owners in the energy sector.

The SBOM POC group has met monthly since April 2021 to advance SBOM development in the energy sector and share information with the stakeholder community.

Latest SBOM POC Meeting

Energy Sector BOM Collaboration Webinar

November 18, 2024

A collaborative webinar focused on sharing insights and strategies for effective partnership and innovation.

Meeting Video Library

Overview of SBOM Energy POC

January 26, 2021

Provides an overview of the SBOM work across a range of industries and communities during...

Framing Software Supply Chain Transparency

February 18, 2021

Provides a technical deep dive into what an SBOM is, the process for developing SBOMS,...

Lessons from Energy Community

March 24, 2021

Offers lessons from the field, including work with DOE’s CyTRICS program, supplier and customer perspectives...

Planning a POC for Energy Community

April 14, 2021

Explores the SBOM POC effort that later kicked off on April 26, 2021....

Proof of Concept Kickoff

April 26, 2021

Attendees may be interested in this review of SBOM use cases, and the benefits across...

Energy SBOM POC Charter

May 19, 2021

The Project Charter captures high level planning information (scope, deliverables, assumptions, etc.) about the SBOM...

Mural Synthesis Work

June 2, 2021

Agenda: To identify specific topics, use cases, and technology gaps the POC would like to...

Brainstorming

June 16, 2021

Healthcare Lessons Learned

June 30, 2021

Cooking Class: Jennings Aske of NY Presbyterian Medical Center and Jim Jacobson of Siemens Healthineers...

Minimum Elements for SBOM

July 14, 2021

Additional resources: NTIA SBOM Minimum Elements Report The 2019 NTIA Healthcare SBOM POC The Roles...

Use Cases – Part 1

August 25, 2021

This session will discuss use cases for SBOM....

Use Cases – Part 2

September 8, 2021

Part 2 - This session will discuss use cases for SBOM....

Making an SBOM

September 21, 2021

Cooking Class: Steve Springett, leader of the OWASP CycloneDX project, demonstrates how to create an...

SBOM Open Source

October 6, 2021

Cooking Class: Thomas Steenbergen of Here.com discusses how the European auto industry is now using...

SBOM and VEX

October 20, 2021

Cooking Show: Dr. Allan Friedman of CISA explains the concept and importance of the Vulnerabilities...

Juice Shop Demonstration

November 1, 2021

A detailed walkthrough of the SBOM elements within the Juiceshop open source product....

Healthcare Proof of Concept

November 3, 2021

Cooking Class: Presented by Tim Walsh of the Mayo Clinic...

All Hazards Analysis (AHA) VEXing

November 16, 2021

Michael Hoover demonstrates how to link SBOM and VEX-driven component-level risk analysis with systemic critical...

Energy SBOM Retrospective

December 1, 2021

A retrospective analysis of the past year of Energy SBOM work and brainstorming for the...

Venues for SBOM Discussion

February 16, 2022

A review of SBOM’s activities from past year and preview of discussion opportunities and path...

SBOM Transports

March 16, 2022

Energy Sector Software Bill of Materials discussion: survey results of software bill of materials transports....

Debrief of S4 SBOM Exercise

May 18, 2022

Discuss exercises and feedback from the S4x22 conference session; CISA working group updates and CycloneDx...

VEX Energy Overview

June 15, 2022

An update to VEX vulnerabilities and some tricks for addressing them....

How to Build SBOM from Binaries

August 17, 2022

Using CyTRICS program research to tell a "round-about" story of SBOMs....

Towards SBOMs in the Nuclear Industry

September 21, 2022

A recording of DOE's bi-weekly meeting on SBOMs....

Discussion of SBOMs at Microsoft and Google

October 19, 2022

Adrian Digilio from Microsoft discusses Microsoft’s Open Source SBOM Tool and Isaac Hepworth from Google...

Sharing SBOMs

December 14, 2022

S4x23 SBOM Challenge Overview and Outcomes

March 15, 2023

Recap of the S4x23 Software Bill of Materials (SBOM) challenge along with the results....

SBOM Sharing Lifecycle Report

April 19, 2023

How are you using SBOMs today?

June 27, 2023

“Wind Supply Chain Security” and “SBOM Regulations”

July 19, 2023

SBOM Use Cases and CyMANII

December 12, 2023

Cyber Labeling and SBOM Comparison

January 17, 2024

Automating SBOMs and Lessons Learned from generating BOMs for CyTRICS

March 20, 2024

Energy Sector BOM Collaboration Webinar

November 18, 2024

A collaborative webinar focused on sharing insights and strategies for effective partnership and innovation....

Additional Resources

The National Telecommunications and Information Administration (NTIA) led an early multi-stakeholder effort to develop informational and technical resources for SBOMs between 2018-2021.

Click Learn More to review these foundational resources.

The Energy SBOM POC effort is a partnership between DOE CESER and DHS CISA. CISA is leading other SBOM-related efforts that inform and draw from this work. Click Learn More to review the CISA workstreams and resources.

April 30, 2021 Auburn University’s McCrary Institute hosted a panel discussion on growing policy support for BOMs, implementation challenges, and strategic use cases. Panelists include representatives from DOE, Idaho National Laboratory, NTIA, Unisys, and Microsoft Azure.

CESER Partners with CISA to Release New Framework for Software Bill of Materials Sharing.

Sponsor and Participating Organizations

For questions or comments on this standards search, please contact us at [email protected].