The CRA is all about creating resilient products and overall in the society, resilience is an important issue. Can we build digital infrastructures with a high degree of resilience? We also need to discuss the balance between compliance, which is the lower level, and security for our users – which is the goal of the CRA! That’s why the theme for this conference is “BEYOND COMPLIANCE: Building resilience“.
The CRA became EU-wide law in December 2024 and will come into full force in December 2027, with a first step in the second half of 2026. The clock is ticking and it’s time for your team to get your products compliant and if needed certified by a third party.
Let’s meet in Stockholm November 5-6 to discuss this and learn more, share experiences and network!
/Olle E. Johansson
Registration is open! Discover our talks and our speakers!
Our goal is to fill the conference with participants and to stimulate good discussions around the EU Cyber Resilience Act and related legislations. Where to start? What does this mean? What are you doing? We have speakers and an engaged audience. Please help us spread the word:
THURSDAY
FRIDAY
See the full agenda:
Friday morning:
Free roundtable discussions
Friday afternoon:
Training sessions
Meet collegues and discuss their steps to get ready in time. Learn from our excellent speakers and sponsors!
Learn about the process - how does this affect your agile development, you compliance process and your release strategy?
The Cyber Resilience Act will extend the CE mark and include Cyber Security. Vendors need to keep products secure and up to date for the life time of the product.
The conference is getting close and we realised that we have a problem and needed to change. So that’s exactly what we’re doing and you will see the change on the web site soon. We Read more
We are happy to introduce the sponsor for the Nordic Software Security Summit 2026: Chainguard Chainguard is the trusted source for open source. By providing engineers and AI agents with hardened, trusted, and production-ready artifacts, Read more
We are proud to introduce our three keynote speakers: ASTOR NUMMELIN KARLBERG, Director of Open Source Sovereignty, SUSE Astor Nummelin Carlberg is a senior strategist operating at the intersection of digital infrastructure and European public Read more
The big question during the conference will be “Are we ready?“. The EU Cyber Resilience Act not only changes how we create products (secure by default and secure by design) but also how they are Read more
We have set the theme for the fall conference! It indicates the need to think beyond the short-term compliance work, to consider the reason why we have the EU Cyber Resilience Act: To build a Read more
The next edition of the NSSS conference is November 4-6, again in Hotel Birger Jarl in Stockholm, Sweden. This is the leading nordic conference focusing on application security in the light of the new and Read more
The Nordic Software Security Summit is the leading Nordic conference on application security in the light of the EU Cyber Resilience Act. This fall, we’re organising our third event and this time we’re opening for Read more
With the spring conference over we’re already planning the Nordic Software Security Summit Fall ’26. As the full implementation date for the EU Cyber Resilience Act (CRA) is getting closer, it’s getting more important to Read more
We have now published our agenda for both Nordic Software Security Summit – the Spring ’26 edition – and the SBOM Focus premiere event! The list of speakers is impressive, you will get two days Read more
