Agreed - but we can’t just talk about software either… Bob
From: Philip Odence <[email protected]> Date: Monday, May 18, 2026 at 2:06 PM To: Robert A Martin <[email protected]>; [email protected] <[email protected]> Subject: [EXT] Re: SPDX outreach - ideas for outreach stories This Message Is From an External Sender This message originates outside of MITRE. If you feel this is suspicious, please report it via "Report Suspicious Email" button in Outlook. Thanks, Bob. Sorry to get all semantic on you again, but I would be careful with the term "business case.” That typically refers to an economic justification for a course of action. Let me take a shot at clarifying my thinking. * A profile is a set of fields that are necessary to describe a particular software area of interest. * Profile use cases are high level and illustrate a particular area or aspects of that area. * However, while a profile contains necessary fields, it likely doesn’t include fields to fully do the job for that area. * Most areas will require, in addition to the profile, the fields from the Core and Software foundational profiles. * And they may require profiles from other areas. * It is also the case that a BOM might incorporate multiple areas. So different mixes of profiles are possible. * Usage examples, describe broadly and in detail, how a set of SPDX profiles may be used address a particular business problem. From: [email protected] <[email protected]> on behalf of Martin, Robert A via lists.spdx.org <[email protected]> Date: Monday, May 18, 2026 at 9:36 AM To: [email protected] <[email protected]> Subject: SPDX outreach - ideas for outreach stories Idea Area 1: Architecture of SPDX Profiles and their Use for capturing and conveying real systems Graphs and Simple BOMs - their use for enterprise analysis and real-time decisions Idea Area 2: Explain how to use SPDX to describe business cases / usage scenario Areas of Interest - explain how to use the various profiles to create a useful SPDX file How to create a page or two that explains the mix needed - look at https://spdx.dev/learn/areas-of-interest/ai/<https://urldefense.us/v2/url?u=https-3A__spdx.dev_learn_areas-2Dof-2Dinterest_ai_&d=DwMGaQ&c=Al8V6E3U0yBSSEuVtdZbGtsvjPA49U3WmtZAsdW0D_Q&r=yyf_tMRBY80wjAUP82gpfmv0fTJk5mALsolNn8pXnYc&m=OuHcWHqyK3TqpAyZkYfVO4h3z_EdIxNovUS1OUqN5tIInpUdJG-IqMejlqkCK86s&s=0U6BQSl2OnGHQ16AqTTvqSocIyUGm-SxhHyatslmPkA&e=> Bob -- Robert (Bob) Martin Sr. Software and Supply Chain Assurance Principal Eng. Cyber Integration and Innovation Cell Department Cyber Engineering Division Center for AI, Cyber & Digital MITRE Technology & Engineering MITRE Corporation 781-271-3001o 781-424-4095c -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#1490): https://lists.spdx.org/g/Spdx-outreach/message/1490 Mute This Topic: https://lists.spdx.org/mt/119372742/21656 Group Owner: [email protected] Unsubscribe: https://lists.spdx.org/g/Spdx-outreach/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
