- CISA and G7 partners issued new guidance for AI software supply chain security
- The effort advances international work on software transparency and cyber resilience
- Explore emerging cyber threats at the 2026 Cyber Summit on May 21
The Cybersecurity and Infrastructure Security Agency and Group of Seven international partners have issued a new joint guidance titled “Software Bill of Materials for AI – Minimum Elements.”
The new SBOM for AI guidance from CISA and the G7 reflects the growing focus on securing emerging technologies and strengthening cyber resilience. Continue the conversation at the Potomac Officers Club's 2026 Cyber Summit on May 21, where government and industry leaders will explore the latest cybersecurity priorities and challenges. Reserve your spot for next week's event.
What Does the New AI SBOM Guidance Cover?
CISA said Tuesday the document was developed alongside the G7 Cybersecurity Working Group, which includes partners from Canada, France, Germany, Italy, Japan, the U.K. and the European Union. The guidance is intended to enhance transparency and cybersecurity in artificial intelligence supply chains. It also further develops CISA's ongoing work with government and international stakeholders to align on SBOM standards and provides recommendations tailored to AI systems.
The new guidance builds on earlier SBOM initiatives led by CISA and international partners, including a 2025 joint vision document promoting global SBOM adoption and updated minimum element recommendations aimed at strengthening software supply chain transparency.
What Is an SBOM for AI?
A software bill of materials, or SBOM, provides organizations with a detailed inventory of software components, offering clearer visibility into supply chains and helping organizations assess and mitigate risks to critical systems.
