ATIS Releases First Telecom-Specific Cryptographic Bill of Materials Profile to Support 5G Quantum-Safe Migration
WASHINGTON, Sept. 30, 2026 — ATIS today announced the release of the Cryptographic Bill of Materials (CBOM for Telecom), the first CBOM profile developed specifically for the 5G mobile telecommunications industry. It applies the established CBOM concept, including the CycloneDX CBOM schema, to 5G-specific cryptographic assets and dependencies.
Created through ATIS’ Quantum-Safe Communications and Information Initiative, this release provides a framework to help operators, vendors and technology providers identify, document and manage the cryptographic assets and dependencies that secure 5G mobile infrastructure.
As the telecommunications industry prepares for the transition to quantum-safe networks, cryptographic visibility is becoming a critical operational requirement. 5G infrastructure relies on cryptography across network functions, interfaces, protocols, certificates, keys, authentication mechanisms and software components. Without a consistent way to identify and represent these dependencies, operators face challenges in assessing quantum exposure, prioritizing migration activities and coordinating with vendors across complex network environments.
“ATIS’ CBOM for Telecom provides the industry with a standardized foundation for understanding the cryptographic assets securing 5G infrastructure,” said ATIS President and CEO Susan M. Miller. “As the industry moves toward quantum-safe networks, CBOM provides a practical tool for crypto-agility, risk-based migration planning and long-term security resilience.
“CBOM is more than documentation; it is an enabler for operational planning, vendor collaboration and network resilience. ATIS is pleased to bring the industry together to advance this important work as cryptographic readiness becomes a strategic priority.”
ATIS expects the CBOM for Telecom to continue evolving through community collaboration, with a roadmap to expand coverage across additional telecom services as industry migration requirements mature. Learn more about the CBOM.
