SBOM in SaaS Environments: An Update - Nisha Kumar, Oracle

SBOM in SaaS Environments: An Update - Nisha Kumar, Oracle
In April of 2023, the US Cybersecurity and Infrastructure Security Agency (CISA) spun up a community workstream to facilitate discussions on how Software Bill of Materials (SBOM) may be applied in a Software as a Service (SaaS) environment. Three subgroups were created to address different concerns of SaaS transparency. After a full year of discussion, the working group has completed a document that will be published by CISA soon.
This talk goes into detail about the document, addressing concerns from various stakeholders, industry gaps in understanding SaaS, and what work is needed in the future. Attendees will come away with a sense of where to start with SBOM when consuming or creating a SaaS offering.