When a critical vulnerability emerges, your reputation depends on the answers you can support with evidence. Which products are affected? Is the vulnerability exploitable? Can customers trust your assessment?
The webinar will explore why trustworthy software bills of materials (SBOMs) require governance across the product lifecycle. Generating an inventory is the starting point. Sustaining confidence requires clear ownership, enforceable quality standards, and repeatable processes for every released product version.
SBOM governance establishes who is accountable, what evidence meets the quality bar, and how an organization maintains and shares that evidence. It connects engineering workflows with vulnerability response and gives customers a stronger basis for evaluating supplier claims.
Bringing together supplier and independent-assessment perspectives, the session will examine how organizations can:
- Establish accountable governance: Define enterprise requirements, approve generation tools, and enforce release gates for SBOM quality.
- Maintain usable evidence throughout the lifecycle: Retain release-specific SBOMs, monitor component risk, and preserve an audit trail of changes and distribution.
- Control how security information reaches customers: Validate requests and provide SBOMs with corresponding Vulnerability Exploitability eXchange (VEX) information.
- Verify the evidence independently: Check provenance, test completeness against shipped binaries, and document findings and limitations.
- Connect governance to cybersecurity assurance: Examine how SBOM evidence supports ISA/IEC 62443 assessments and EU Cyber Resilience Act readiness.
For manufacturers and industrial asset owners, the central question is whether the organization can consistently produce trustworthy evidence and use it when a security decision matters. This webinar will examine the governance and verification practices that make that possible.