# Compliance articles ## Pages - [The CRA Single Reporting Platform Opens Tomorrow: What ENISA Actually Requires](https://sbomify.com/2026/09/10/cra-single-reporting-platform-enisa-srp/) (2026-09-10): ENISA's CRA Single Reporting Platform goes live on 11 September 2026 with Article 14 reporting obligations. Registration, Assigned Representative roles, the 24/72-hour clocks, CSIRT selection, and the fields you will be typing. - [BSI TR-03183 Is Now Four Documents, and the CRA Clock Runs Out in Three Weeks](https://sbomify.com/2026/08/20/bsi-tr-03183-four-parts-cra-update/) (2026-08-20): BSI published TR-03183-1 in version 1.0.0 on 31 July 2026, completing a four-part CRA guideline family. Here is what changed across TR-03183, the Commission's July 2026 guidance, and the ENISA Single Reporting Platform before 11 September. - [ENISA's New Healthcare Procurement Guidelines Ask for SBOMs Without Saying the Word](https://sbomify.com/2026/07/23/enisa-healthcare-procurement-guidelines/) (2026-07-23): ENISA's July 2026 procurement guidelines for hospitals and healthcare providers require supply chain transparency, component listings, and vulnerability management. Here is how SBOMs satisfy them. - [FDA Medical Device SBOM Requirements: What the New Cybersecurity Guidance Means for Manufacturers](https://sbomify.com/2026/01/09/fda-medical-device-sbom-requirements/) (2026-01-09): Breakdown of the FDA's June 2025 guidance on medical device cybersecurity, explaining SBOM requirements, premarket submission expectations, and compliance strategies. - [How SBOMs Can Help You Achieve PCI DSS 4.0 Compliance](https://sbomify.com/2025/01/07/how-sboms-can-help-you-achieve-pci-dss-4-compliance/) (2025-01-07): Discover how Software Bill of Materials (SBOMs) help online gambling and e-commerce businesses achieve PCI DSS 4.0 compliance through better vulnerability management and audit trails. - [Embracing Cybersecurity with CISA's 'Secure by Design' Initiative](https://sbomify.com/2024/07/24/embracing-cybersecurity-with-cisas-secure-by-design-initiative/) (2024-07-24): Overview of CISA's Secure by Design guide, its three core principles for software manufacturers, and practical steps for implementing security from the start. - [Understanding ISO 42001 and the Integration of SBOMs for Enhanced Operational Resilience](https://sbomify.com/2024/05/02/understanding-iso-42001-and-the-integration-of-sboms-for-enhanced-operational-resilience/) (2024-05-02): How to integrate SBOMs with ISO 42001 operational resilience management systems for better risk assessment, incident response, and compliance. - [Harnessing ISO 27001 and SBOMs for Enhanced Information Security Management](https://sbomify.com/2024/04/29/harnessing-iso-27001-and-sboms-for-enhanced-information-security-management/) (2024-04-29): How to integrate SBOMs into ISO 27001 information security management systems for better risk assessment, compliance auditing, and vendor management. - [How SBOMs Streamline SOC 2 Compliance: Insights for the Agile Enterprise](https://sbomify.com/2024/04/23/how-sboms-streamline-soc-2-compliance-insights-for-the-agile-enterprise/) (2024-04-23): Guide on using SBOMs to simplify SOC 2 Type I and Type II compliance through improved transparency, proactive risk management, and streamlined audits. - [NIST Cybersecurity Framework (CSF) 2.0: What It Means for Software Supply Chain Security](https://sbomify.com/2024/04/11/introducing-the-nist-cybersecurity-framework-csf-2-0/) (2024-04-11): A practical guide to NIST CSF 2.0, its six core functions including the new GOVERN function, and how SBOMs support CSF 2.0 implementation for supply chain risk management and vulnerability monitoring. - [Elevating M&A Due Diligence with SBOMs: A Guide for Corporate Strategists](https://sbomify.com/2024/04/07/elevating-ma-due-diligence-with-sboms-a-guide-for-corporate-strategists/) (2024-04-07): How SBOMs accelerate M&A due diligence compared to traditional source code analysis with Black Duck, offering faster evaluation, IP protection, and streamlined compliance. - [Elevating M&A Due Diligence with sbomify's SBOM Management](https://sbomify.com/2024/04/03/elevating-ma-due-diligence-with-sbomifys-sbom-management/) (2024-04-03): How sbomify streamlines M&A due diligence by providing comprehensive software asset evaluation, vulnerability assessment, and license compliance checking. - [Streamlining Open Source License Compliance in M&A: Unveiling the sbomify Advantage](https://sbomify.com/2024/04/03/streamlining-open-source-license-compliance-in-ma-unveiling-the-sbomify-advantage/) (2024-04-03): Learn how sbomify simplifies open source license compliance during M&A due diligence by automating SBOM analysis to identify GPLv3 and other non-permissive licenses. - [The Time is Now: Embracing SBOMs in an Era of Enhanced Cybersecurity Standards](https://sbomify.com/2024/04/03/the-time-is-now-embracing-sboms-in-an-era-of-enhanced-cybersecurity-standards/) (2024-04-03): Why 2024-2026 is the critical window for SBOM adoption. From EO 14028 and the EU Cyber Resilience Act to PCI DSS 4.0 and FDA guidance, regulatory requirements are converging – and the tooling is ready. --- From sbomify: https://sbomify.com/categories/compliance/