Software Bill of Materials requirements
Software Bill of Materials requirements are arriving in the energy sector through overlapping federal mandates, with the U.S. Department of Energy and the U.S. Cybersecurity and Infrastructure Security Agency driving disclosure obligations that now reach operational technology vendors supplying grid and pipeline operators. The White House Executive Order 14028 on Improving the Nation's Cybersecurity established SBOM as a baseline expectation for software used in critical infrastructure, and energy firms are now working backward through vendor contracts to confirm which suppliers can actually produce machine-readable SBOMs to spec. The Federal Energy Regulatory Commission has not yet issued a standalone SBOM rule, but its ongoing critical infrastructure protection proceedings are the near-term vehicle to watch.
Watch
- CISA's minimum SBOM data field requirements and whether OT vendors comply
- FERC CIP standards revision docket for any SBOM incorporation language
- DOE's updated Cyber-Informed Engineering guidance referencing SBOM for grid software
- Vendor contract audit clauses: do they obligate SBOM delivery on new software releases?
- EU Cyber Resilience Act SBOM provisions applying to energy software sold into European markets
Recent material activity in Energy, Power & Commodities
-
FERC opens scoping period for Southeast Supply Header Tupelo Trail natural gas pipeline project
On July 27, 2026, the Federal Energy Regulatory Commission opened a scoping period for the Tupelo Trail Project, a natural gas pipeline expansion proposed by Southeast Supply Header, LLC. The notice solicits public and s…
Read a full sample brief → -
FERC schedules environmental assessment for Texas Eastern Transmission Athens Optimization Project
FERC issued a notice on July 27, 2026 establishing the preparation schedule for an Environmental Assessment covering Texas Eastern Transmission's Athens Optimization Project. The notice opens the agency's formal environm…
Read a full sample brief → -
FERC Energy Markets & Grid Regulation release pending Cresthaven Analytics full analysis: Steel Reef Pipelines US LLC; Notice of Scoping Period Requesting Comments on Environmental Issues for the Proposed Flat Lake Access Pipeline Project
FERC Energy Markets & Grid Regulation published a regulatory release titled 'Steel Reef Pipelines US LLC; Notice of Scoping Period Requesting Comments on Environmental Issues for the Proposed Flat Lake Access Pipeline Pr…
Read a full sample brief → -
FERC authorizes Comtu Falls Corporation to continue hydroelectric project operations under existing license
FERC authorized Comtu Falls Corporation on July 27, 2026 to continue operating its licensed hydroelectric project. The authorization maintains the project's operational status pending any further Commission action on the…
Read a full sample brief → -
AEMC publishes National Electricity Rules Version 251 incorporating distribution network planning and reporting amendments
The Australian Energy Market Commission published Version 251 of the National Electricity Rules on 23 July 2026. This version incorporates Schedule 2 of the National Electricity Amendment (Enhancing distribution network …
Read a full sample brief → -
EPA grants final SIP approval for Missouri petroleum liquid storage and transfer emission controls in St. Louis
The EPA on July 23, 2026 gave final approval to revisions of the Missouri State Implementation Plan governing emission controls for petroleum liquid storage, loading, and transfer in the St. Louis area. The revisions adj…
Read a full sample brief → -
EPA proposes to approve Pennsylvania SIP revision relaxing RACT requirements for single natural gas compressor station
The EPA published a proposed rule on July 23, 2026 to approve a Pennsylvania state implementation plan revision affecting source-specific air emission control requirements at the Equitrans, Inc. Hartson Compressor Statio…
Read a full sample brief → -
EPA proposes to approve New Jersey RACT certifications for 2008 and 2015 ozone air quality standards
EPA published a proposed rule on July 23, 2026 to approve New Jersey's State Implementation Plan revisions certifying Reasonably Available Control Technology requirements for two ozone standards. The proposal also addres…
Read a full sample brief → -
FERC publishes environmental assessment for Columbia Gas Transmission Southeast Virginia Energy Storage Project
FERC issued a Notice of Availability on July 23, 2026 for the environmental assessment covering Columbia Gas Transmission's proposed Southeast Virginia Energy Storage Project. The notice opens the public comment period u…
Read a full sample brief → -
FERC expands NEPA categorical exclusion to cover qualifying water power license and exemption terminations
FERC issued a final rule on July 23, 2026, extending an existing categorical exclusion to cover terminations or revocations of water power licenses and exemptions where ground disturbance is minor or absent and reservoir…
Read a full sample brief →