What's Happening in Japan? the Current Situation of SBOM
summary
Japan shows slow but concrete SBOM adoption: only 27% compliance among 110 exporters to the EU, PoC projects across healthcare, automotive and software evaluate costs and effects, and companies shift toward automated SBOM generation. METI publishes SBOM guideline v2 (+60 pages) after 100+ public comments, defining a three‑phase process (tool selection, SBOM production/sharing, SBOM‑driven vulnerability/license management) and adding practical steps using CVSS SSVC EPSS KEV plus scope and contract models (who produces SBOM, who pays, how to report).
AI-written summary · about
chapters (8)
- 0:00Introduction
- 1:05SBOM in Japan
- 2:31Global SBOM standards
- 3:41SBOM adoption challenges
- 6:38Government SBOM initiatives
- 8:24Japan's SBOM guideline
- 11:18SBOM guideline v2 updates
- 14:29Closing remarks
related talks
32mWhat's Happening in Japan? The Current Situation of SBOM
26mSBOM today: What is the state of SBOMs?
30mTransparency in the Software Supply Chain: Making SBOM a Reality
16mKeynote: SBOM is Coming: Why You Should Care and How You Can Help
35mSBOMs: Navigating the Evolving Landscape of Software Bill of Materials
22mSBOM and Security Transparency - How it all fits together
35mBOF: SBOMs for Embedded Systems: What's Working, What's Not?
29mThe Current State of SBOMs for End Users