2025-16147Notice

CISA Wants Ideas for Clearer Software Security Labels

Published Date: 8/22/2025

Notice

Summary

CISA wants your thoughts on new rules for Software Bills of Materials (SBOMs) in 2025. These updates make SBOMs clearer and better, helping companies keep software safer. If you make or use software, this could affect you soon—so get ready to share your ideas and stay ahead!

Analyzed Economic Effects

3 provisions identified: 3 benefits, 0 costs, 0 mixed.

Updated SBOM Elements for 2025

CISA's 2025 draft updates the recommended elements of a Software Bill of Materials (SBOM) to reflect improvements in SBOM tooling and greater maturity of implementation. If you create or use software, these updated elements describe what information is recommended to include in an SBOM going forward.

CISA Seeks Public Comment on SBOMs

If you make or use software, CISA published a draft called the "2025 Minimum Elements for a Software Bill of Materials (SBOM)" and is asking for public comments in 2025. You can submit feedback on the draft guidance so your views may shape the final recommendations.

Guidance Is Voluntary, Not Mandatory

CISA describes the 2025 Minimum Elements as proposed voluntary guidance. That means CISA is recommending these SBOM elements rather than imposing a mandatory requirement.

Your PRIA Score

Score Hidden

Personalized for You

How does this regulation affect your finances?

Sign up for a PRIA Policy Scan to see your personalized alignment score for this federal register document and every other regulation we track. We analyze your financial profile against policy provisions to show you exactly what matters to your wallet.

Free to start

Key Dates

Published Date
8/22/2025

Department and Agencies

Department
Independent Agency
Agency
Homeland Security Department
Source: View HTML
Back to Federal Register

Take It Personal

Get Your Personalized Policy View

Start a Free Government Policy Watch to see how policy affects your household, then upgrade to PRIA Full Coverage for year-round monitoring.

Already have an account? Sign in