[{"data":1,"prerenderedAt":91},["ShallowReactive",2],{"news-\u002Fnews\u002Feo-14412-cbom-standard-2027":3},{"id":4,"title":5,"author":6,"authorTitle":7,"authorUrl":8,"body":9,"canonical":8,"category":43,"date":44,"description":45,"draft":46,"extension":47,"faqs":48,"findingsSource":8,"geo":58,"image":60,"industries":61,"keyFindings":8,"meta":64,"modified":65,"navigation":66,"path":67,"pullquote":8,"recommendations":8,"references":68,"related":72,"seo":79,"seoTitle":80,"signposts":8,"slug":81,"stats":8,"stem":82,"tags":83,"tldr":89,"__hash__":90},"news\u002Fnews\u002Feo-14412-cbom-standard-2027.md","Executive Order 14412 Orders a Cryptography Bill of Materials Standard by 2027","ArcQubit Team","",null,{"type":10,"value":11,"toc":39},"minimark",[12,17,24,27,30,33],[13,14,16],"h2",{"id":15},"executive-order-14412-orders-a-cryptography-bill-of-materials-standard-by-2027","Executive Order 14412 orders a cryptography bill of materials standard by 2027",[18,19,20],"p",{},[21,22,23],"strong",{},"22 JUNE 2026, WASHINGTON",[18,25,26],{},"Executive Order 14412 directs CISA and NIST to publish the minimum elements of a cryptography bill of materials within 270 days of the order. Counting from 22 June 2026, that points to roughly 19 March 2027. A cryptography bill of materials, or CBOM, is a structured inventory of the cryptographic algorithms, protocols and key lengths a product uses, so a buyer can see which components depend on quantum-vulnerable cryptography.",[18,28,29],{},"The order tasks the two agencies with defining what a conforming CBOM must contain rather than prescribing one file format. That mirrors how the software bill of materials guidance developed, where minimum elements set a baseline and tools filled in the detail. The CBOM gives agencies a way to track cryptographic dependencies across their estates and to compare suppliers on a consistent basis.",[18,31,32],{},"Vendors should expect CBOMs to appear in procurement questionnaires. Once agencies can ask for a cryptography inventory and check it, post-quantum readiness becomes a verifiable supplier attribute instead of a marketing claim. Suppliers that already maintain a cryptographic inventory of their own products will find the request straightforward to answer.",[18,34,35,38],{},[21,36,37],{},"Why it matters."," The CBOM requirement turns cryptographic transparency into a procurement expectation. Buyers gain a repeatable way to ask suppliers what algorithms their products use, and suppliers gain a clear reason to inventory their own cryptography before the questions arrive. Organizations that build a product-level cryptographic inventory ahead of the 2027 standard will be ready to respond when federal buyers start asking.",{"title":7,"searchDepth":40,"depth":40,"links":41},2,[42],{"id":15,"depth":40,"text":16},"Policy","2026-06-22","Executive Order 14412 directs CISA and NIST to publish cryptography bill of materials minimum elements within 270 days, pointing to roughly March 2027.",false,"md",[49,52,55],{"q":50,"a":51},"What is a cryptography bill of materials?","A cryptography bill of materials, or CBOM, is a machine-readable inventory of the cryptographic algorithms, protocols and key lengths a product uses. It lets buyers see which components rely on quantum-vulnerable cryptography without reverse-engineering the product.",{"q":53,"a":54},"When is the CBOM standard due?","The order gives CISA and NIST 270 days from 22 June 2026 to publish the minimum elements, which points to roughly 19 March 2027. The agencies define what a conforming CBOM must contain rather than mandating a single file format.",{"q":56,"a":57},"How will CBOMs affect procurement?","Buyers are expected to add CBOM requests to procurement questionnaires, so vendors should be ready to supply a cryptography inventory for their products. A CBOM makes post-quantum readiness a checkable supplier attribute rather than a claim.",[59],"washington-dc","\u002Fassets\u002Fog-default.png",[62,63],"Cross-Sector","Information Technology",{},"2026-09-24",true,"\u002Fnews\u002Feo-14412-cbom-standard-2027",[69],{"label":70,"url":71},"The White House, \"Executive Order 14412,\" Federal Register, vol. 91, p. 38483, Jun. 22, 2026.","https:\u002F\u002Fwww.federalregister.gov\u002Fdocuments\u002F2026\u002F06\u002F22",[73,76],{"label":74,"url":75},"Executive Order 14412 Sets 2030 and 2031 Post-Quantum Deadlines for Federal Systems","\u002Fnews\u002Feo-14412-federal-pqc-deadlines-2030-2031",{"label":77,"url":78},"CISA, NSA and NIST Urge Organizations to Start Quantum-Readiness Planning","\u002Fnews\u002Fcisa-nsa-nist-quantum-readiness-factsheet",{"title":5,"description":45},"EO 14412 Orders a CBOM Standard by 2027","eo-14412-cbom-standard-2027","news\u002Feo-14412-cbom-standard-2027",[84,85,86,87,88],"EO 14412","cryptographic discovery","federal compliance","supply chain","for government","Executive Order 14412 directs CISA and NIST to publish cryptography bill of materials minimum elements within 270 days, pointing to a March 2027 standard.","z9X11twBXcAwG2pBiqkjfgwyk1ly3hw3eeIH1IBl1EU",1792182885629]