# Defense Contractor Software Bill Of Materials (SBOM) Checklist

> Get a step-by-step process for getting clarity about SBOM requirements, executing generation correctly, and addressing vulnerabilities when they emerge.

canonical: https://secureframe.com/compliance-resources/software-bill-of-materials-sbom-checklist

### Defense Contractor Software Bill Of Materials (SBOM) Checklist

Most defense contractors handle SBOMs reactively: a customer asks, and you scramble to figure out what they want and how to deliver it. This checklist gives you a step-by-step process for getting clarity about requirements, executing generation correctly, and addressing vulnerabilities when they emerge.

What you'll get:

- A list of critical questions to ask your customer to clarify requirements before you generate your SBOM. 
- Step-by-step guidance on scanning your built artifact, choosing the right tool, assigning ownership, maintaining version history, and documenting exceptions.
- An ongoing process to reassess SBOMs when new CVEs drop, maintain an audit trail, manage transitive dependencies, and keep supporting evidence organized.