Source: OJ L 2024/2847, 20.11.2024
ENRecital 22 ADCO to aggregate software bills of materials
In view of the public cybersecurity means cybersecurity as defined in Article 2, point (1), of Regulation (EU) 2019/881; objectives of this Regulation and in order to improve the situational awareness of Member States as regards the Union’s dependency on software means the part of an electronic information system which consists of computer code; components means software or hardware intended for integration into an electronic information system; and in particular on potentially free and open-source software means software the source code of which is openly shared and which is made available under a free and open-source licence which provides for all rights to make it freely accessible, usable, modifiable and redistributable; components means software or hardware intended for integration into an electronic information system;, a dedicated administrative cooperation group means a group as defined in Article 2, point (11), of Directive 2013/34/EU; (ADCO) established by this Regulation should be able to decide to jointly undertake a Union dependency assessment. Market surveillance authorities means a market surveillance authority as defined in Article 3, point (4), of Regulation (EU) 2019/1020; should be able to request manufacturers means a natural or legal person who develops or manufactures products with digital elements or has products with digital elements designed, developed or manufactured, and markets them under its name or trademark, whether for payment, monetisation or free of charge; of categories of products with digital elements means a software or hardware product and its remote data processing solutions, including software or hardware components being placed on the market separately; established by ADCO to submit the software bills of materials means a formal record containing details and supply chain relationships of components included in the software elements of a product with digital elements; (SBOMs) that they have generated pursuant to this Regulation. In order to protect the confidentiality of SBOMs, market surveillance authorities means a market surveillance authority as defined in Article 3, point (4), of Regulation (EU) 2019/1020; should submit relevant information about dependencies to ADCO in an anonymised and aggregated manner.