Shape the Future of EU Cybersecurity: Participate in ENISA’s Study on SBOM Adoption

Shape the Future of EU Cybersecurity: Participate in ENISA’s Study on SBOM Adoption

 

Deadline: on Friday 19 December 2025.

 

The European Union Agency for Cybersecurity (ENISA) has officially launched a pivotal survey to map the current State of the Art of Software Bill of Materials (SBOM) adoption. This initiative is a critical component of ENISA’s broader strategy to support the European Commission in the practical implementation of the Cyber Resilience Act (CRA), a regulation set to redefine digital security standards across the continent.

As software supply chain security becomes a top priority, ENISA is reaching out to organisations and industry professionals to gather real-world data on how SBOMs are currently being utilised. The primary objective of this study is to move beyond theoretical discussions and capture a clear picture of the market's maturity. By participating, respondents provide ENISA and the European Commission with essential visibility into the most common formats, tooling, and usage scenarios currently in play, as well as the perceived value and existing gaps between SBOM generation and consumption.

The results of this survey will be instrumental in bridging the gap between regulation and reality. ENISA and the European Commission will use the aggregated data to tailor their approach to the CRA, ensuring that future guidelines and requirements reflect the actual technical landscape and address the genuine challenges faced by the industry. Some of the inquiries are informed by foundational research from the Linux Foundation, ensuring the study is grounded in established cybersecurity readiness metrics.

For industry stakeholders, this is more than just a questionnaire; it is a strategic opportunity to have a voice in the regulatory process. By sharing your feedback, you help highlight the practical hurdles of SBOM implementation, ensuring that EU policies are both effective and feasible. The survey takes approximately 20-25 minutes to complete, with responses kept strictly confidential. Stakeholders are encouraged to contribute before the deadline on Friday 19 December 2025.

 

PARTICIPATE IN THE SURVEY