See https://github.com/oasis-tcs/openc2-usecases/tree/main/PlugFests/2021.06.22-BC-SBOM-PoC#11-vision