The second edition of the CBOM Operating Model. A Cryptographic Bill of Materials is a fiduciary control system, not an inventory. With NIST, Singapore, the UK and Australia now setting post-quantum transition milestones, this article sets out the Dirty Dozen, triangulated discovery, the Toxic Asset Register and the governance spine a board needs to prove where its cryptography is.
