2 Comments
User's avatar
Phil Wolff's avatar

A Software BOM is good. A services BOM is better. With whom are you outsourcing your storage, compute, identity, NLP, pattern recognition, etc? Who else touches my data or APIs or network or devices under your auspices? Give me something to audit and crawl to find data breaches, identity vulnerabilities, outages, etc.

Expand full comment
Ayman Elsawah's avatar

100%, well said!

Expand full comment