CIOs are put to the test as security regulations across borders recalibrate

Cloudsmith’s Artifact Management Report and expert commentary warn that while most organisations generate SBOMs, only about a quarter do so automatically, and many lack the processes and confidence to pass unexpected software supply-chain audits required under the EU Cyber Resilience Act; achieving comprehensive reporting and auditability will require significant time and effort, and the CRA’s scope broadly covers vendors of any connected digital systems.