Agenda: Tuesday Sept 24th: Track two

9:00-9:30

CRA and compliance – what to do?

Björn Sjöholm, Unidot

9:30-
10:00

Who are you depending on? Due diligence in the regulated software industry

Per-Erik Eriksson, HIQ

10:00-10:30

To be hit by a cyber attack – anything but an IT issue

Elin Richarz

10:30-11:00

Break

11:00-11:30

CRA, CE marking and a new perception of quality

Emma Höij, ChangeAbility

11:30-12:00

What’s new for open source and security? You need to improve the security posture of your project!

Mikaël Barbero, Eclipse Foundation

12:00-12:30

Adding security to DevOps

Mats Persson, Omegapoint

12:30-13:30

Lunch

13:30-14:00

High quality SBOMs for C/C++ and native code

Andreas Bielk, SBOM Observer

14:00-14:30

Compiler Options Hardening for C and C++

Thomas Nyman, Ericsson

14:30-15:00

Ship Happens: The Stormy Seas of Supply Chain Security

David Archer, Endor Labs

15:00-15:30

Afternoon Break

The conference continues in hall Congress B as a single track.

15:30-16:10

From Log4shell to Log4SBOM

Piotr P. Karwasz, Apache Logging Services

16:10-16:40

Not a Good Day: What really happened to kernel.org

Leif Nixon, Combitech

16:40-16:50

Promoting skills development, research and innovation in CyberSecurity

A brief presentation of NCC-SE and Cybernode.se

Christoffer Karsberg, NCC-SE, MSB
Martin Bergling, Cybernode.se, RI.SE

16:50-17:10

Closing of the conference & Raffle

Olle E. Johansson, Edvina AB