---

# SBOM future

(This is entirely my personal opinion)

## Facts

- The US Federal government requires SBOM's before purchasing a solution.

- The dutch government strongly recommends SBOMs.

- There is an increasing responsibility for vendors to provide (security) updates for a longer period. (e.g. smartphones, home routers etc.)

- New critical CVE's will be discovered.

---

## Future

- More companies scan their software during the build process.

- More companies will request SBOM's before purchasing or using software.

- Software companies will use SBOM's to be able to easily maintain their software.

- And you will start to appreciate them too.

---

## Question

- Which licenses are applicable?

- Do they comply with business rules?
