Data provenance and supply-chain security for ML models (SBOM/AIBOM)

People now ask for an “AIBOM” the way they ask for an SBOM. Official CISA, NIST and NTIA pages define software bills of materials, say they apply to AI software, and publish supplemental AI elements. They do not, in the sources we checked, create a CMMC practice or a DFARS clause named AIBOM.

Status as of 14 October 2026: CISA’s 2026 Minimum Elements HTML page is still dated Publish Date July 29, 2026 and still updates and replaces the 2021 NTIA minimum elements. The live HTML page now also says some software types—such as artificial intelligence and software as a service in cloud environments—may require additional elements and that any effort to improve software transparency, regardless of the software type, should begin with the application of minimum elements. That HTML sentence sits beside the July 2026 PDF’s statement that this document does not introduce additional elements for SBOMs for AI systems; we show both. The SPDX 3.0.1 AI Profile is unchanged. CISA’s separate SBOM for AI page timed out on this pass; the May 2026 citation is kept from the URL already in the frontmatter.

What an SBOM is, according to CISA and NTIA

CISA’s SBOM topic page is the federal home for the work. The 2026 Minimum Elements, published 29 July 2026, update and replace the minimum elements for an SBOM published by the National Telecommunications and Information Administration (NTIA) in 2021. The NTIA 2021 report is the document being replaced.

CISA describes an SBOM as an “ingredients list” for software. The 2026 PDF says the minimum elements do not create new requirements; they refine how organizations should generate and request SBOMs.

The same PDF is explicit about AI: the minimum elements outlined in this document apply to SBOMs for all software, including open source software, AI software, and SaaS. It also says this document does not introduce additional elements for SBOMs for AI systems. Extra fields that AI engineers discuss under “model cards” or “data cards.” are called out as additional useful supply chain data, not as 2026 minimum elements. See model cards for defense AI documentation.

CISA’s news release repeats that the 2026 elements apply to SBOMs for all software, including open-source software, AI software, and software-as-a-service (SaaS).

The separate AI SBOM guidance

On 12 May 2026 CISA and G7 partners published Software Bill of Materials for AI – Minimum Elements. The page says the guidance provides recommendations on minimum elements that should be included in an SBOM for AI and that because AI systems are software systems, these recommendations should be considered in addition to the general minimum elements for an SBOM. It also says the supplemental elements are not exhaustive or mandatory.

That is the official federal language closest to “AIBOM.” The page title is still an SBOM for AI, not a separately mandated artifact.

What NIST tells federal acquirers

NIST’s software supply-chain SBOM page says that when applicable to a procurement, federal agencies should require their suppliers of software products and services to provide access to machine-readable SBOMs conforming to the EO and NTIA minimum elements. Acceptable formats currently include SPDX, CycloneDX, and SWID. Agencies should continue using the risk-based approaches in SP 800-161r1 and SP 800-218.

That is federal software-acquisition guidance. We searched it for a sentence that names AIBOM, CMMC, or DFARS. We did not find those names on that page.

Machine-readable AI inventories that exist today

CycloneDX lists AI/ML-BOM as a capability. The Authoritative Guide to ML-BOM defines an ML-BOM as a CycloneDX BOM document designed to address the unique complexities and risks of AI/ML systems. The homepage says CycloneDX is the standard for multiple world governments and the defense industrial base and is trusted for satellite and space systems, missile guidance systems, and algorithmic warfare. Listing: CycloneDX (AI/ML-BOM).

The SPDX 3.0.1 AI Profile is designed to provide a standardized way of documenting and sharing information about AI software packages (i.e. systems), including software packages, models, and datasets. Listing: SPDX AI Profile.

Those are official format pages. They are not CMMC assessment objectives.

What we searched for and did not find

We searched the CISA, NIST and NTIA pages cited above for a sentence that makes “AIBOM” a CMMC Level 2 or Level 3 practice or a DFARS clause. We did not find one. CMMC remains a CUI-protection program; see CMMC Level 2 vs Level 3 for AI.

Analysis, not sourced fact: a program can still produce a 2026-minimum-element SBOM for the software that wraps a model, add the May 2026 CISA AI supplemental fields where they help, and attach a CycloneDX ML-BOM or SPDX AI Profile document for model and dataset inventory. That stacking is a reading of the documents, not a requirement we found.

Questions

Is an AIBOM required for CMMC?

No source we cite says that. CISA’s AI SBOM page calls the supplemental elements not exhaustive or mandatory. The 2026 general minimum elements do not create new requirements.

Does the 2026 SBOM document replace the need for model cards?

No. The 2026 PDF says model cards and data cards may be additional useful supply chain data and does not introduce additional elements for SBOMs for AI systems.