SBOM
A machine-readable inventory of all software components, libraries, and dependencies in a software application or embedded system.
In context
A medical device manufacturer producing an implantable pump submits an SBOM to the FDA listing every open-source library, third-party component, and version hash in the device firmware — enabling the regulator to verify no known-vulnerable software is present. When Log4Shell was discovered in 2021, manufacturers with complete SBOMs in their PLM could assess exposure across their entire product fleet within hours; those without SBOMs spent weeks doing manual inventory.
Why it matters
SBOM is increasingly mandated by regulation for products with embedded software. Manufacturers must manage it alongside physical BOMs to maintain complete product records and supply chain transparency.
Related concepts
External References
This term appears in
Cite this definition
Finocchiaro, Michael. “SBOM.” DemystifyingPLM PLM Glossary, 2026, https://www.demystifyingplm.com/glossary/sbom