Publication date:June 9, 2026
ENISA launched a survey at the end of 2025 to gather factual data on how organisations across industries and of varying sizes are approaching Software Bill of Materials (SBOM) adoption in response to the EU Cyber Resilience Act (CRA). This report analyses the survey results, which confirm that the CRA acts as an accelerator for SBOM adoption. Organisations are broadly investing in SBOM generation and automation to integrate SBOMs into the Software Development Life Cycle (SDLC), while also accelerating their implementation timelines to meet expected maturity levels.
