A Software BOM is good. A services BOM is better. With whom are you outsourcing your storage, compute, identity, NLP, pattern recognition, etc? Who else touches my data or APIs or network or devices under your auspices? Give me something to audit and crawl to find data breaches, identity vulnerabilities, outages, etc.
I Read The Entire Cybersecurity Executive Order... Here's What You Need To Know
A Software BOM is good. A services BOM is better. With whom are you outsourcing your storage, compute, identity, NLP, pattern recognition, etc? Who else touches my data or APIs or network or devices under your auspices? Give me something to audit and crawl to find data breaches, identity vulnerabilities, outages, etc.