9:00-12:30

Single track, check track 1

12:30-13:30

Lunch

13:30-14:00

To be announced

14:00-14:30

To be announced

14:30-15:00

Henrik Sandklef, Aboutcode
Henrik Sandklef, aboutcode

Open source’s answer to CRA compliance and vulnerability chaos

Vulnerability data is broken in the same way software supply chains were a decade ago: fragmented, duplicative, and impossible to trust without redoing the work yourself. The EU Cyber Resilience Act (CRA) is about to make that a legal problem, not just a technical one, as organizations are scrambling to prove they can track, report, and respond to vulnerabilities across their software supply chain.

15:00-15:30

Break
After its back to single track, check track 1

Open Source Security Foundation
OWASP Foundation
Open regulatory compliance working group (ORCWG.ORG)