Name: Sometimes Sequels Are Good: CISA’s Update To the 2021 NTIA SBOM Minimum Elements - Victoria Ontiveros, CISA
Start: 2025-08-26T11:00:00+0200
End: 2025-08-26T11:40:00+0200

25-27, August 2025
Amsterdam, Netherlands
View More Details & Registration
Note: The schedule is subject to change.

The Sched app allows you to build your schedule but is not a substitute for your event registration. You must be registered for Open Source Summit Europe 2025 to participate in the sessions. If you have not registered but would like to join us, please go to the event registration page to purchase a registration.

This schedule is automatically displayed in Central European Summer Time, CEST (UTC +2). To see the schedule in your preferred timezone, please select from the drop-down menu to the right.

IMPORTANT NOTE: Timing of sessions and room locations are subject to change.

Tuesday August 26, 2025 11:00 - 11:40 CEST

G105

Software Bills of Materials (SBOM) have started strong, but there’s still more to say about our software. The 2021 Minimum Elements have served as a common specification for implementation around the world but, as many have noted, they are a bit dated. The Cybersecurity and Infrastructure Security Agency (CISA) has drafted an updated “Minimum Elements for a Software Bill of Materials (SBOM).”

This presentation will provide an overview of the draft 2025 CISA SBOM Minimum Elements and explain the factors that influenced the decisions behind the proposed updates. After reviewing the context of the 2021 NTIA Minimum Elements, the presentation will summarize the changes CISA has observed in the SBOM landscape since 2021 and provide an overview of the draft CISA Minimum Elements, noting how the proposed updates fit in with other regulations and guidance around the world. Finally, the presentation will explain key decisions made in the development of the updated Minimum Elements, closing with a PSA on how the community can share their thoughts and suggestions with CISA. The presentation will conclude with time for questions and discussion.

Speakers

Victoria Ontiveros

Program Manager, Software Bill of Materials (SBOM) & Open Source Software (OSS) Security, CISA

Victoria Ontiveros is the program manager for Software Bill of Materials (SBOM) and Open Source Software (OSS) at the Cybersecurity and Infrastructure Security Agency (CISA). When she's not collaborating with interagency, industry, and international partners on SBOM and OSS initiatives... Read More →

Tuesday August 26, 2025 11:00 - 11:40 CEST
G105

OpenGovCon

Audience Experience Level Beginner

Open Source Summit Europe 2025

Victoria Ontiveros

Sign up or log in to save this to your schedule, view media, leave feedback and see who's attending!