The CrowdStrike incident earlier this month caused massive IT outages across the globe. I’ve been asked “would a software bill of materials (SBOM) have helped prevent this?” The answer is “no,” but I understand why people ask. For good reason, industry and government have placed a big emphasis on creating and providing SBOMs, but this emphasis leads to people thinking SBOMS must be part of the answer to any question. When all you have is an SBOM, everything seems like a problem solved by SBOMs.