ACCORDING to CISA and the Group of Seven (G7) international partners—Germany, Canada, France, Italy, Japan, the United Kingdom, and the European Union—joint guidance on Software Bill of Materials for AI – Minimum Elements has been released to help public and private sector stakeholders improve transparency in their AI systems and supply chains.
The guidance, published on 12 May 2026, explains that a software bill of materials (SBOM) acts as an “ingredients list” for software to help organisations understand their supply chains and make risk-informed decisions. It builds on CISA’s previous work with federal and international partners to establish a shared vision for an SBOM and provides recommendations on minimum elements that should be included for an SBOM for AI, in addition to the general minimum elements for an SBOM.
While not exhaustive or mandatory, the supplemental minimal elements reflect the consensus of G7 experts and will expand over time to keep pace with AI advancement.