The NSSS blog: The Software Regulation Revolution

Introducing the keynotes

We are proud to introduce our three keynote speakers: ASTOR NUMMELIN KARLBERG, Director of Open Source Sovereignty, SUSE Astor Nummelin Carlberg is a senior strategist operating at the intersection of digital infrastructure and European public policy. As Director of Open Source Sovereignty at SUSE, he leads engagement with European institutions to advance a secure and transparent digital future. Formerly the Executive Director of OpenForum Europe, Astor has an extensive track record in legislative work within the European Parliament, focusing on interoperability, the AI Act, and the Cyber Resilience Act. PATRIK FÄLTSTRÖM, Netnod Patrik has been an active participant in Internet governance issues at the global level. In the late 1990s he was a member of the gTLD Policy Oversight Committee, ...

Read more

Are we ready for the EU Cyber Resilience Act?

The big question during the conference will be “Are we ready?“. The EU Cyber Resilience Act not only changes how we create products (secure by default and secure by design) but also how they are managed during the lifetime. Free security upgrades and active vulnerability management will cost time and resources – how will that affect the market? Will Swedish industry get ready in time? Thursday November 5th we have a panel discussion on this topic led by Cyber Chats & Chill‘s Linda Nieminen and Margarita Sallinen.

Read more

The Fall 2026 theme: Beyond compliance: Building resilience

We have set the theme for the fall conference! It indicates the need to think beyond the short-term compliance work, to consider the reason why we have the EU Cyber Resilience Act: To build a resilient IT infrastructure for the society. This should be the focus for the work, and will be a natural focus once we have gotten over the initial phase and all the changes needed. The CRA will come into full action for all products sold in December 2027. There’s not much time to get ready, especially if your products need certification. Make sure you connect with others, learn from the experts and discuss your issues at the Nordic Software Security Summit in Stockholm, November 4-7! Beyond ...

Read more

NSSS Fall ’26: November 4-6 in Stockholm

With the spring conference over we’re already planning the Nordic Software Security Summit Fall ’26. As the full implementation date for the EU Cyber Resilience Act (CRA) is getting closer, it’s getting more important to meet, discuss, learn and build networks among each other. The fall conference will have This time we will also have an exhibition where sponsors can show their products and services, like the first conference in 2024. We have plenty of sponsor opportunities ranging from full participation in the exhibition to sponsorship of T-shirts, drinks after the conference or just a logotype on our web site. Contact us today for ideas and discussions! The gold sponsorship is still open! We are looking forward to seeing you …

Read more

NSSS Spring ’26: April 8-9 + SBOM Focus April 10

We can now confirm the date for NSSS Spring 2026: April 8-9 in Stockholm, Sweden. The spring edition will be a bit smaller than what we planned for the fall, but still the fact-filled event you can expect! April 10 is the launch of the SBOM Focus conference! You can buy combined tickets for both NSSS Spring ’26 and SBOM Focus.

Read more

Want to speak at the fall conference? We want to hear from you!

The next edition of the NSSS conference is November 4-6, again in Hotel Birger Jarl in Stockholm, Sweden. This is the leading nordic conference focusing on application security in the light of the new and coming legislations – the EU Cyber Resilience Act and the AI Act. How would a manufacturer work to keep the user’s cyber security in focus? What are the tools, the processes, the platforms needed? Join us by suggesting a talk early in the process. The call for papers is out now. We want to hear from you! /Olle and Erik

Read more

NSSS Fall 2026: Sponsor opportunities

The Nordic Software Security Summit is the leading Nordic conference on application security in the light of the EU Cyber Resilience Act. This fall, we’re organising our third event and this time we’re opening for sponsors to join the exhibition area, sponsor lunch or cocktails or something else that will create a good contact with our participants. Contact us today for a prospect – info (at) nsss.se Contact us today at info (at) nsss.se to get the prospect for the conference and start a discussion!

Read more

The agenda is published – register today!

We have now published our agenda for both Nordic Software Security Summit – the Spring ’26 edition – and the SBOM Focus premiere event! The list of speakers is impressive, you will get two days filled with good content, many good meetings with peers and a lot of new knowledge. From educational talks to practical use cases and ways to approach this big change from a largely unregulated business to a strong cybersecurity-focused regulation for software. Register today and plan your trip to Stockholm!

Read more

Want to meet our participants?

We have a few openings at attractive prices for sponsors that wants to meet our participants. Sponsorship include a small table, place for a roll up and an opportunity to hand out stickers and other giveaways! Meeting our participants during the conference – you’ll be in the conference room. Please contact Olle E. Johansson today for information and prices!

Read more

Dr Allan Friedman participates in SBOM Focus!

We are proud to present Dr Allan Friedman as a speaker! The SBOM Focus conference in Stockholm Friday April 10th will be a starting point for building an SBOM community across Europe. Allan Friedman has spearheaded a lot of work in the US – working groups, standards, documents and the SBOM-a-rama conference. Allan will participate remotely.

Read more

Spring 2026 theme: Resilience under pressure

This year’s theme is RESILIENCE UNDER PRESSURE. The new EU laws about service, systems and software security is focused on resilience. Being able to operate society, services and business in a resilient way, being able to come back after an attack and being able to protect networks and services from malicious cyber threats. All these new laws and directives come into place during a time where we all are under pressure from a changing world and live in challenging times. The work needed is not really focused on compliance, meeting the lower end of the requirements, but focused on building a more secure and resilient digital platform for us all. Let’s meet in Stockholm April 8-10 in Hotel Birger Jarl …

Read more

Subscribe to our Newsletter