What's Happening in Japan? The Current Situation of SBOM
summary
Japan reports concrete progress: METI issues SBOM guidance (v1 July 2023, v2 Aug 2024) with 60 pages added and 100 public comments, and national strategy mandates SBOM use for IoT and devices. A PwC survey finds only 27% compliance among exporters to the EU. Guidelines give a four‑step vulnerability workflow, a transparency matrix for direct vs transitive coverage, a contract template, and case studies including an internal Hitachi SBOM system operating for >10 years; common problems remain format choice, tool automation, and vuln matching.
AI-written summary · about
chapters (9)
- 0:00SBOM in Japan
- 1:51Global SBOM trends
- 7:37SBOM adoption challenges
- 11:59Government SBOM initiatives
- 16:51SBOM guideline v2 updates
- 23:39SBOM contract model
- 27:20Case studies
- 28:05Key takeaways
- 29:49Q&A
related talks
16mWhat's Happening in Japan? the Current Situation of SBOM
26mSBOM today: What is the state of SBOMs?
22mSBOM and Security Transparency - How it all fits together
30mTransparency in the Software Supply Chain: Making SBOM a Reality
35mSBOMs: Navigating the Evolving Landscape of Software Bill of Materials
16mKeynote: SBOM is Coming: Why You Should Care and How You Can Help
44mSBOM in SaaS Environments: An Update
52mThe World on SBOMs