SBOM Integration for CISO Assistant

[arnehude]

Integrating OWASP Dependency-Track with CISO Assistant would enable automated ingestion of CycloneDX SBOMs, providing visibility into software components, vulnerabilities, and license risks. This allows technical software supply chain findings to be directly linked with risks, assets, controls, and compliance requirements managed in CISO Assistant. The integration would support NIS2, ISO 27001, CRA, and supplier risk management initiatives while reducing manual effort and improving auditability of software security processes.