Germany – IT services: consulting, software development, Internet and support – Project 1034: Technical Implementation of an SBOM for AI (SBOM4AI)

Opportunity description

In the field of traditional software, Software Bills of Materials (SBOMs)—that is, bills of materials containing information about software components and their dependencies—have long been in use and are even required by the Cyber Resilience Act (CRA). This requirement also applies to AI systems; however, the idea of an SBOM specifically for AI systems is relatively new. Initial approaches therefore entail the risk that they do not cover all necessary aspects with regard to the transparency of the AI supply chain. In this project, the concept "SBOM for AI - Minimum Elements," published within the G7 framework, is to be put into practice, and a technical implementation of the defined criteria is to be developed for this purpose. The SBOM for AI is to be created automatically and output in a suitable format. The developed implementation is then to be made available to all stakeholders in order to make an important contribution to the cybersecurity of AI systems. Procedure: open. Review the original TED notice for the complete requirement, lots, amendments and attachments.