In a recent article, Kristof Verslype from Smals addresses this gap. He argues that while current recommendations are human-readable, they’re not machine-processable, limiting automation and increasing room for error. Converting these into structured, code-based formats could significantly improve security operations.

One proposed solution is the Cryptography Bill of Materials (CBOM), a structured inventory that helps organizations track cryptographic assets, document exceptions, and streamline migration planning. Even when older methods must be temporarily tolerated, CBOM helps evaluate risk and maintain control.

Curious to explore more? You can read the full article here