Senior decision-makers come together to connect around strategies and business trends affecting utilities.

Richard Brooks's picture
Co-Founder and Lead Software Engineer Reliable Energy Analytics LLC

Dick Brooks is the inventor of patent 11,374,961: METHODS FOR VERIFICATION OF SOFTWARE OBJECT AUTHENTICITY AND INTEGRITY and the Software Assurance Guardian™ (SAG ™) Point Man™ (SAG-PM™) software...

  • Member since 2018
  • 1,505 items added with 651,909 views
  • Oct 21, 2021

A House Bill (H.R. 4611) requiring Software Bill of Materials (SBOM) has passed the House with a vote of 412-2.

This bill requires a vendor to supply an SBOM for new and existing government contracts.

But that's not all, a vulnerability disclosure is also required:

certification that each item listed on the
submitted bill of materials is free from all known
vulnerabilities or defects affecting the security of the
end product or service identified in—
(A) the National Institute of Standards and
Technology National Vulnerability Database;

Fortunately there is a free to use, open-source solution which software vendors can freely use to communicate SBOM and Known Vulnerability Information required by this legislation to DHS and other software customers called the Vendor Response File XML Schema and Known Vulnerabilities Disclosure Certification document available here.



No discussions yet. Start a discussion below.

Richard Brooks's picture
Thank Richard for the Post!
Energy Central contributors share their experience and insights for the benefit of other Members (like you). Please show them your appreciation by leaving a comment, 'liking' this post, or following this Member.
More posts from this member

Get Published - Build a Following

The Energy Central Power Industry Network is based on one core idea - power industry professionals helping each other and advancing the industry by sharing and learning from each other.

If you have an experience or insight to share or have learned something from a conference or seminar, your peers and colleagues on Energy Central want to hear about it. It's also easy to share a link to an article you've liked or an industry resource that you think would be helpful.

                 Learn more about posting on Energy Central »