Beniva Software Bill of Materials (SBOM) enables your organization to ingest SBOM files, increase visibility to software installation vulnerabilities, reduce time to identify impacts and remediate those vulnerabilities quickly within your organization; all while simplifying the requirement to comply with U.S Executive Order 14028\.

Key Features:

* Beniva SBOM allows you to consume Vulnerability Exploitability eXchange (VEX) files (CycloneDX JSON) within the ServiceNow platform.
* Increase visibility to vulnerable software installations and configuration items.
* Identify software products and versions that are impacted by an exploitable vulnerability.
* Identify risk to easily prioritize configuration items and software installations that require patching.

“A Software Bill of Materials (SBOM) is a complete, formally structured list of components, libraries, and modules that are required to build (i.e., compile and link) a given piece of software and the supply chain relationships between them. These components can be open source or proprietary, free or paid, and widely available or restricted” – NTIA

The ISO International Standard for open-source license compliance (ISO/IEC 5230:2020 – Information technology – Open Source Specification) requires a process for managing a bill of materials for supplied software. This aligns with the NTIA goals for increased software transparency and illustrates how the global industry is addressing challenges in this space.

Increase Visibility: SBOM + SAM Pro provides visibility to software components within the organization.​

Decrease Risk Exposure: SBOM + ITOM will determine configuration items and their dependencies affected by vulnerable components.

Mitigate Risk & Remain compliant: SBOM + DevSecOps gets the vulnerability to the right team at the right time reducing organizational risk/ threats.​​