Software Inventory

A software inventory is a complete, current record of the applications, libraries, and components an organization runs, including the AI models and third-party packages embedded in its products and internal tools. For AI governance, it is the starting point for knowing where AI systems are deployed, which vendors supply them, and which ones fall under regulations like the EU AI Act. Without an accurate inventory, compliance teams cannot assess risk, respond quickly when a vulnerability is disclosed, or prove to regulators what systems they use.

1 item

ResearchGlobal2026-11-11

AI BOMs Are the Missing Link in Enterprise Supply Chain Transparency

SBOM expert Allan Friedman argues in a SecurityWeek podcast interview that software bills of materials must move from static inventory documents to active inputs for vulnerability management and risk response. AI systems complicate this by introducing model provenance, training data, runtime data sources, and ephemeral agent actions that traditional software inventories do not capture. Friedman describes AI BOMs as an emerging necessity that converges software inventory concepts with logging and third-party risk management.

SBOM AI BOM supply chain transparency third-party risk software inventory agentic AI vulnerability management