SECURITY: CISA Defines Minimum AI Bill-of-Materials Requirements

CISA released minimum elements for an AI-focused bill of materials intended to improve visibility into models, datasets, frameworks, providers and other dependencies within AI systems.

Organizations building or buying Supply Chain AI should maintain component inventories that support vulnerability response, supplier assurance and change control.

More details are available in the CISA guidance.