Software Bill of Materials requirements
Software Bill of Materials requirements are arriving in the energy sector through overlapping federal mandates, with the U.S. Department of Energy and the U.S. Cybersecurity and Infrastructure Security Agency driving disclosure obligations that now reach operational technology vendors supplying grid and pipeline operators. The White House Executive Order 14028 on Improving the Nation's Cybersecurity established SBOM as a baseline expectation for software used in critical infrastructure, and energy firms are now working backward through vendor contracts to confirm which suppliers can actually produce machine-readable SBOMs to spec. The Federal Energy Regulatory Commission has not yet issued a standalone SBOM rule, but its ongoing critical infrastructure protection proceedings are the near-term vehicle to watch.
Watch
- CISA's minimum SBOM data field requirements and whether OT vendors comply
- FERC CIP standards revision docket for any SBOM incorporation language
- DOE's updated Cyber-Informed Engineering guidance referencing SBOM for grid software
- Vendor contract audit clauses: do they obligate SBOM delivery on new software releases?
- EU Cyber Resilience Act SBOM provisions applying to energy software sold into European markets
Recent material activity in Energy, Power & Commodities
FERC staff issues final SEIS for Idaho Power Hells Canyon Hydroelectric Project relicensing proceeding
FERC staff issued a final Supplemental Environmental Impact Statement on September 1, 2026, supplementing the August 2007 final EIS for Idaho Power Company's Hells Canyon Hydroelectric Project. The document advances the …
Read a full sample brief →FERC opens scoping period for MountainWest Overthrust Pipeline Green River West Expansion Project
On September 4, 2026, the Federal Energy Regulatory Commission opened a scoping period for the Green River West Expansion Project, proposed by MountainWest Overthrust Pipeline, LLC. The notice solicits public and agency …
Read a full sample brief →FERC accepts DeepGreen Cook Inlet SPV preliminary hydropower permit application and solicits competing filings
FERC has accepted a preliminary permit application from DeepGreen Cook Inlet SPV, LLC for a proposed hydropower project in Cook Inlet, Alaska. The notice opens a comment and competing-application window under the Federal…
Read a full sample brief →FERC publishes Florida Gas Transmission blanket authorization request with intervention and protest deadline
On September 3, 2026, the Federal Energy Regulatory Commission published a notice of Florida Gas Transmission Company, LLC's request under the natural gas pipeline blanket certificate program. The notice establishes a de…
Read a full sample brief →EPA issues SRE decisions on 34 petitions for the 2025 RFS compliance year
The EPA announced final decisions on 34 small refinery exemption petitions under the Renewable Fuel Standard program for the 2025 compliance year, published September 2, 2026. The agency also reissued one 2024 compliance…
Read a full sample brief →DOE repeals fossil fuel restrictions for new federal buildings and stays clean energy compliance date
The Department of Energy published a final rule on September 2, 2026 repealing clean energy requirements for new federal buildings and major renovations. The agency simultaneously stayed the compliance date for the affec…
Read a full sample brief →FERC issues environmental assessment notice for Forza Pipeline LLC proposed natural gas project
On September 2, 2026, the Federal Energy Regulatory Commission published a Notice of Availability of the Environmental Assessment for the proposed Forza Pipeline Project, opening the public comment period under FERC's ce…
Read a full sample brief →FERC opens pre-filing licensing process for Columbia Basin Hydropower with public scoping and study requests
FERC issued a Notice of Intent on September 2, 2026, opening the pre-filing process for a new hydropower license application at Columbia Basin Hydropower. The notice initiates formal scoping, invites comments on the Pre-…
Read a full sample brief →FERC Energy Markets & Grid Regulation release pending Cresthaven Analytics full analysis: Columbia Basin Hydropower; Notice of Intent To File License Application, Filing of Pre-Application Document (Pad), Commencement of Pre-Filing Process,
FERC Energy Markets & Grid Regulation published a regulatory release titled 'Columbia Basin Hydropower; Notice of Intent To File License Application, Filing of Pre-Application Document (Pad), Commencement of Pre-Filing P…
Read a full sample brief →FERC opens pre-filing licensing process for Columbia Basin Hydropower project on the Columbia River system
On September 2, 2026, the Federal Energy Regulatory Commission published a Notice of Intent and Pre-Application Document for a new hydropower license application from Columbia Basin Hydropower. The notice opens the forma…
Read a full sample brief →