Friday before lunch, we’re inviting to round table discussions. We are still working on the details, but the idea is to gather around the speakers with a few themes:

  • General CRA compliance
    • How do we prove compliance?
    • Standardisation
  • SBOMs
    • What is needed?
    • Tools
    • Difference between SBOM types
    • Where do I start?
  • Vulnerability and incident management
    • CVE & friends
    • Incident management
    • Detecting vulnerabilities
  • Open Source Software
    • How do I do due diligence
    • What about licensing and copyright?
    • Can I still use Open Source components?
Focus on the Cyber Resilience Act
Open Source Security Foundation
OWASP Foundation
Open regulatory compliance working group (ORCWG.ORG)