Do you contractually require suppliers to provide and maintain a current component inventory (e.g., software or hardware bill of materials) for critical products?

This question assesses whether your organization formally requires suppliers to document and keep updated inventories of all components within critical products. Having a complete bill of materials (BOM) enables you to quickly identify affected systems when vulnerabilities are discovered in specific components, assess supply chain risks, and manage product security throughout its lifecycle. Evidence of fulfillment could include: sample contract language that explicitly requires suppliers to maintain and provide component inventories, documented processes for collecting and reviewing supplier BOMs, and examples of actual component inventories (software/hardware BOMs) received from suppliers for critical products.