Focus Areas
Focus Areas
What the CBOM Profiles Working Group focuses on
Profile Methodology
Defining and maintaining a neutral methodology for specifying CBOM profiles, independent of any single base BOM standard.
Standards Mapping
Developing mapping guidance so that profiles can be expressed in SPDX, CycloneDX, and other relevant BOM standards.
Reference Profiles
Authoring reference profiles — including PKI-focused profiles — as worked examples that demonstrate the methodology.
PKI Domain Expertise
Applying the PKIC's core domain knowledge to define PKI-focused CBOM profiles as exemplary use cases.
Tooling Cooperation
Exploring cooperation with relevant open-source and standards initiatives — including the Linux Foundation (PQCA, SPDX) and the OWASP Foundation (CycloneDX) — so that the methodology can be supported by practical tooling.
Openness & Adoption
Ensuring the methodology is easy to adopt, freely available, and understandable across different cryptographic environments and industries.
