India's CERT-In folds AI into five-inventory supply chain framework most firms haven't started

shashib · x · 2026-08-22

India's CERT-In released v2.0 guidelines in July 2025, consolidating five bill-of-materials categories into one framework: software (SBOM), cryptography (CBOM), quantum (QBOM), hardware (HBOM) and AI (AIBOM). The first version (Oct 2024) covered only SBOM — a structured list of every library and dependency in an application.

The author argues most enterprises haven't even finished SBOM, undermining the rest: CBOM inventories existing crypto assets, QBOM grades them against a quantum clock, while HBOM and AIBOM extend the idea to chips and models. The guidelines are voluntary in India, targeting public sector, government and software export organizations first.

Original post →

More from Safety

Safety channel →