Skip to main content

HEALTH-ISAC SBOM REPOSITORY

SBOM Management, Monitoring and Sharing platform

Health-ISAC and Cybeats have joined forces to introduce a groundbreaking Software Bill of Materials (SBOM) management and repository SBOM Studio environment, designed for medical device manufacturers (MDMs) and health delivery organizations (HDOs). The SaaS-based repository enables medical device manufacturers to upload SBOM and Vulnerability Exploitability (VEX) security artifacts in the standard formats: CycloneDX or Software Package Data Exchange (SPDX) SBOMs.

MDM participants to the Health-ISAC service will be able to upload SBOM and VEX artifacts, as well as other relevant security artifacts. SBOM Studio identifies errors or deficiencies upon ingestion ensuring high-quality SBOM artifacts. The platform also provides SBOM monitoring, enrichment, and vulnerability alerting capabilities for MDMs desiring such capabilities. MDMs manage SBOM consumer access control putting them in complete control of data sharing.

All HDOs regardless of Health-ISAC membership will have access to a healthcare sector-specific, SBOM, and VEX repository at no cost.

Cybeats SBOM Studio addresses and aligns with organizations’ need to implement the FDA and NIST SSDF and EO SBOM requirements.

Unique Offering:

  • Discounted pricing Health-ISAC MDM Members
  • The offer applies to new SBOM Studio customers and existing customers looking to utilize the Health-ISAC environment.
  • FREE Access for HDOs whether you’re a Health-ISAC Member or not.
MDM benefits include
  • Trusted & Secure Sharing: Rest easy knowing that your SBOMs and VEX data are handled with accuracy and securely.
  • Cost-Effective: Cut costs without compromising the quality and security of your SBOM management, monitoring, and sharing.
Benefits for HDOs include
  • Trusted and Secure Source: Access SBOM data from a reliable and secure source, ensuring the integrity of your information.
  • Aggregation Point: Simplify your SBOM data collection process with a centralized aggregation point.
  • On-Demand Access: Retrieve the SBOM and VEX data you need, when you need it, without delays or the need for constant back-and-forth communications.
This site is registered on Toolset.com as a development site.