Some thoughts, questions, and ideas about Software Bill of Materials and its practical application

I'm going to be asking some questions about a fairly new concept in the field of compliance (Software Bill of Materials, SBOM), but before I do, I know there are a lot of entry-level people following this sub who's college courses would not have touched on this, so I'll explain it first:

Compliance can seem like this lame, boring thing companies do the bare minimum to pass regulatory guidelines for things. Like in the US there are standards for HIPAA …

application bill cybersecurity ideas questions software software bill of materials