In contract negotiations with utility vendors, what document helps ensure transparency of software supply chain?

In contract negotiations with utility vendors, what document helps ensure transparency of software supply chain?

• A. Non-disclosure agreement.
• B. Patching calendars.
• C. Software Bill of Materials (SBOM).
• D. End-user license agreement.

Answer: (C)

Understanding transparency of software supply chains requires a detailed, shareable inventory of all pieces that compose the software. The Software Bill of Materials is exactly that: a document listing every component, library, and dependency in the product, with version numbers and licenses. In negotiations with utility vendors, having an SBOM lets you see precisely what components are included, where they come from, and how they’re maintained, which supports risk assessment, vulnerability management, and verifiable compliance with contractual expectations. Non-disclosure agreements protect confidential information but don’t reveal supply-chain details. Patching calendars show when fixes are applied, not what components exist. End-user license agreements govern how the software can be used, not what makes up the software’s supply chain.

Understanding transparency of software supply chains requires a detailed, shareable inventory of all pieces that compose the software. The Software Bill of Materials is exactly that: a document listing every component, library, and dependency in the product, with version numbers and licenses. In negotiations with utility vendors, having an SBOM lets you see precisely what components are included, where they come from, and how they’re maintained, which supports risk assessment, vulnerability management, and verifiable compliance with contractual expectations. Non-disclosure agreements protect confidential information but don’t reveal supply-chain details. Patching calendars show when fixes are applied, not what components exist. End-user license agreements govern how the software can be used, not what makes up the software’s supply chain.