AI Bills of Materials: A Growing Necessity for Cybersecurity in 2026

• •AI BOMs are increasingly required for high-risk AI systems by regulators.
• •Only 25% of organizations have visibility into their AI usage despite widespread integration.
• •The G7 has provided guidance on AI BOM standards, highlighting the need for better documentation.

AI Bills of Materials (AI BOMs) are emerging as critical tools for managing AI-related risks, with regulators in Europe and the US beginning to mandate their use for high-risk AI systems. Despite the increasing demand, practical implementation remains limited, with many organizations lacking visibility into their AI components. A recent report indicates that while 85% of organizations have integrated AI into operations, only 25% have comprehensive visibility into its usage. The G7 has issued guidance on AI BOMs, emphasizing the need for standards and documentation. Experts stress that understanding AI BOMs is essential for security leaders to effectively manage AI risks. The current landscape shows that many organizations are still in the early stages of operationalizing AI BOMs, with significant work needed to educate stakeholders and develop practical tools.