May 12, 2026 | Declaration Adoption | Data Governance

On 12 May 2026, the G7 Cybersecurity Working Group released the Software Bill of Materials (SBOM) for AI: Minimum Elements, jointly published by the cybersecurity agencies of Germany, Italy, France, Canada, the United States, the United Kingdom, and Japan, with participation from the European Commission. The Minimum Elements are directed at public and private sector stakeholders involved in the development and deployment of AI systems and set out the information that should be included in an SBOM for AI to increase transparency and cybersecurity along the AI supply chain. The Minimum Elements build on the G7 Cybersecurity Working Group's June 2025 shared vision on SBOM for AI and reflect joint work completed between August 2025 and February 2026. The Minimum Elements organise SBOM content into seven clusters covering metadata about the SBOM document itself, system-level properties of the AI system, models, datasets, infrastructure software and hardware, security properties, and key performance indicators. The Minimum Elements are non-binding and do not create requirements, standards, or legislation. The G7 Cybersecurity Working Group anticipates further refinement of the Minimum Elements as AI technology evolves.