thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Application & OT Security · Advanced

SBOM Minimum Elements

The baseline data fields an SBOM must contain, defined by the U.S. NTIA in 2021 and updated by CISA.

Definition

NTIA's minimum elements are supplier name, component name, version, other unique identifiers, dependency relationship, author of SBOM data and timestamp, plus requirements for automation support and practices. CISA published updated draft minimum elements in 2025 adding fields such as component hash and license.

Example

An SBOM missing component versions fails the procurement team's minimum-elements check.

Exam tip

Know the core fields: supplier, component, version, unique ID, dependency relationship, author, timestamp.

Related terms