CVD, CRA and EUVD from the perspective of a national CSIRT

Peter Jonegård, Advisor at CERT-SE

Since its inception in 2003, CERT-SE has played a role in many vulnerability cases. Going forward, NIS2 and CRA both appoint the national CSIRT as a coordinator when a vulnerability has or might have been found. Other than CERT-SE, this EU directive and EU act also involve researchers/finders/reporters, vendors, users, the market surveillance authority, other CSIRTs and ENISA and the tools Single Reporting Plattform and EU vulnerability database.

In this talk, Peter will describe how CERT-SE works with CVD cases and what CERT-SE knows today about the EU approach to vulnerability reports from vendors and volunteers, coordinating vulnerabilities across borders and the EUVD.