# Standards articles

## Pages

- [Why We're Bullish on TEA, And Why You Should Be Too](https://sbomify.com/2026/03/01/why-were-bullish-on-tea/) (2026-03-01): The Transparency Exchange API (TEA) is the missing standard for automated SBOM discovery and exchange. Here's what it is, why it matters, and why sbomify is all in.
- [CISA's Minimum Elements now in Draft](https://sbomify.com/2025/08/23/cisa-minimum-elements/) (2025-08-23): Analysis of CISA's 2025 draft SBOM Minimum Elements update, adding required hash, license, and tool provenance fields to succeed the 2021 NTIA guidance.
- [Comparing SBOM Formats: Focus on Component Types in CycloneDX vs. SPDX](https://sbomify.com/2024/08/20/sbom-component-types/) (2024-08-20): A detailed comparison of CycloneDX and SPDX SBOM formats, analyzing their support for applications, libraries, containers, operating systems, and SaaS components.
- [What's New in SPDX 3: Enhanced Referencing Capabilities](https://sbomify.com/2024/07/22/whats-new-in-spdx-3-enhanced-referencing-capabilities/) (2024-07-22): SPDX 3 draft introduces nested references, cross-document references, and improved relationship types to match CycloneDX capabilities for complex SBOM management.
- [Understanding ISO 42001 and the Integration of SBOMs for Enhanced Operational Resilience](https://sbomify.com/2024/05/02/understanding-iso-42001-and-the-integration-of-sboms-for-enhanced-operational-resilience/) (2024-05-02): How to integrate SBOMs with ISO 42001 operational resilience management systems for better risk assessment, incident response, and compliance.
- [Exploring the New SPDX 3.0: A Game Changer for SBOMs](https://sbomify.com/2024/04/28/exploring-the-new-spdx-3-0-a-game-changer-for-sboms/) (2024-04-28): Overview of SPDX 3.0 improvements including enhanced compatibility, improved accuracy, streamlined automation, and broader software package support for SBOM generation.
- [NIST Cybersecurity Framework (CSF) 2.0: What It Means for Software Supply Chain Security](https://sbomify.com/2024/04/11/introducing-the-nist-cybersecurity-framework-csf-2-0/) (2024-04-11): A practical guide to NIST CSF 2.0, its six core functions including the new GOVERN function, and how SBOMs support CSF 2.0 implementation for supply chain risk management and vulnerability monitoring.
- [The Time is Now: Embracing SBOMs in an Era of Enhanced Cybersecurity Standards](https://sbomify.com/2024/04/03/the-time-is-now-embracing-sboms-in-an-era-of-enhanced-cybersecurity-standards/) (2024-04-03): Why 2024-2026 is the critical window for SBOM adoption. From EO 14028 and the EU Cyber Resilience Act to PCI DSS 4.0 and FDA guidance, regulatory requirements are converging – and the tooling is ready.

---

From sbomify: https://sbomify.com/tags/standards/