Track 1
Track 2
8:30 – 9:00
Registration
9:00 – 9:30
Defending the Number: Making an SBOM → CRA Decision You Can Explain Later
– Andrey Lukashenkov, Vulners
The power of standards: Making CRA work for everyone
– Linnéa Sundström, Senior advisor, EU standardisation & cybersecurity
ENISA AHWG, CEN-CENELEC
9:30-10:00
Shift security left: How to integrate cyber security professionals early in the process
– Lasse Larsson, Managing director, Energi-CERT
10:00-10:30
OpenChain: Towards a More Secure and Compliant Software Supply Chain
– Vladimir Slavov, Bosch, OpenChain
To be announced
– Björn Sjöholm, Unidot
10:30-11:00
Tea break
11:00-11:30
What Does the Internet Know About Your Software?
– Emelie Markianos, Threat Intelligence consultant
Your Vendors Are Now a Legal Problem: Running Third-Party Security Reviews Under CRA, NIS2 and DORA
– Pedro Morino, Co-founder and CEO, Norigen
11:30-12:00
12:00-12:30
Building TPT: From alert chaos to clear priorities
– Emil Albrektsson, Application security developer @ Nav
Nobody Wants Your Maturity Model
– Simon Wendel, Decerno
12:30-13:30
Lunch
13:30-14:00
To be announced
– To be announced
The New EU Open Source Strategy and Tech Sovereignty
– Johanna Parikka Altenstedt, Head of Cyber Ecosystem Group and the Competence Community Cybernode at RISE
14:00-14:30
OSPO – Your Guide in the Dark
– Johan Toverland Thelin, Founder, Ensline
14:30-15:00
To be announced
-To be announced
To be announced
– To be announced
15:00-15:30
Break
15:30-16:30
KEYNOTE: Beyond compliance : Building resilience
– Astor Nummelin Carlberg, Director of Open Source Sovereignty at SUSE
Session shared with track one