SBOM Ingestion and Reporting Tool 2.0 Update

The Food and Drug Administration is forecasting an update to its SBOM Ingestion and Reporting Tool version 2.0, aimed at enhancing its capabilities for processing software bill of materials data. This update will introduce new functionality to ingest component list elements alongside end-of-life and end-of-support data, improving the system’s ability to track and manage software supply chain risks. The update will also focus on refining data matching algorithms and upgrading underlying database schemas to ensure greater accuracy, efficiency, and scalability in identifying and correlating software components across disparate sources. The initiative is classified under NAICS code 541519, indicating it pertains to other computer-related services, and is being managed by the FDA’s CDRH Acquisition Liaison, with contact information provided through cdrhacquisitions@fda.hhs.gov. The contracting officer role remains unspecified at this time, and no set-aside preferences or geographic performance restrictions are indicated. This forecast signals the agency’s intent to modernize its software supply chain visibility tools, aligning with broader federal cybersecurity and transparency objectives, though formal solicitation details have not yet been released.