Software Bill of Materials (SBOM)

Next meeting scheduled for September 2025

Details coming soon.

Supporting SBOM adoption across the energy sector community

DOE CESER is the sector risk management agency for the energy sector, and in collaboration with the U.S. Department of Homeland Security Cybersecurity and Infrastructure Security Agency (CISA), leads the DOE CESER Energy Sector Software Bills of Materials (SBOM) and Hardware Bill of Materials (HBOM) Quarterly Working Group to support BOM adoption across the energy sector community. This working group supports BOM adoption through facilitating the discussion of use cases, research priorities, and ongoing challenges across ESIB stakeholders. Attendees include, but are not limited to, vendors, asset owners, and government stakeholders.

The Quarterly Working Group has evolved from the SBOM Proof of Concept Group, which began April 2021 to advance BOM development in the energy sector and share information with the stakeholder community.

Software Composition Analysis Tools: SCRM Value Add or Lossy Noise Machines?

In the June 2025 BOM Quarterly, Micaela Gallegos (LLNL) and Robert Erbes (INL) discuss their research on Commercial Software Composition Analysis (SCA) Tools. These commercially available tools offer an additional method for consumers to obtain Software Bills of Materials (SBOMs),..

Meeting Video Library

Mural Synthesis Work

Agenda: To identify specific topics, use cases, and technology gaps the POC would like to...

Energy SBOM POC Charter

The Project Charter captures high level planning information (scope, deliverables, assumptions, etc.) about the SBOM...

Proof of Concept Kickoff

Attendees may be interested in this review of SBOM use cases, and the benefits across...

Planning a POC for Energy Community

Explores the SBOM POC effort that later kicked off on April 26, 2021....

Lessons from Energy Community

Offers lessons from the field, including work with DOE’s CyTRICS program, supplier and customer perspectives...

Framing Software Supply Chain Transparency

Provides a technical deep dive into what an SBOM is, the process for developing SBOMS,...

Additional Resources

The National Telecommunications and Information Administration (NTIA) led an early multi-stakeholder effort to develop informational and technical resources for SBOMs between 2018-2021.

Click Learn More to review these foundational resources.

The Energy SBOM POC effort is a partnership between DOE CESER and DHS CISA. CISA is leading other SBOM-related efforts that inform and draw from this work. Click Learn More to review the CISA workstreams and resources.
April 30, 2021 Auburn University’s McCrary Institute hosted a panel discussion on growing policy support for BOMs, implementation challenges, and strategic use cases. Panelists include representatives from DOE, Idaho National Laboratory, NTIA, Unisys, and Microsoft Azure.
CESER Partners with CISA to Release New Framework for Software Bill of Materials Sharing.

Sponsor and Participating Organizations