Software Bill of Materials (SBOM)

A software bill of materials is a machine-readable inventory of the components, libraries, and dependencies inside a software product, including versions and suppliers, so vulnerabilities in third-party code can be traced. Standard formats are SPDX (ISO/IEC 5962:2021) and CycloneDX. In shipping an SBOM lets owners and class assess exposure in onboard computer-based systems; IACS UR E27 and the supply-chain controls in UR E26 push OEMs and critical service providers to document the software they deliver to a vessel.