Agenda: Tuesday Sept 24th: Track two

9:00-9:30

CRA and compliance – what to do? ^[1]

Björn Sjöholm ^[2], Unidot

9:30-
10:00

Who are you depending on? Due diligence in the regulated software industry ^[3]

Per-Erik Eriksson, ^[4] HIQ

10:00-10:30

To be hit by a cyber attack – anything but an IT issue ^[5]

Elin Richarz ^[6]

10:30-11:00

Break

11:00-11:30

CRA, CE marking and a new perception of quality ^[7]

Emma Höij ^[8], ChangeAbility

11:30-12:00

What’s new for open source and security? You need to improve the security posture of your project! ^[9]

Mikaël Barbero, Eclipse Foundation

12:00-12:30

Adding security to DevOps ^[10]

Mats Persson ^[11], Omegapoint

12:30-13:30

Lunch

13:30-14:00

High quality SBOMs for C/C++ and native code ^[12]

Andreas Bielk ^[13], SBOM Observer

14:00-14:30

Compiler Options Hardening for C and C++ ^[14]

Thomas Nyman ^[15], Ericsson

14:30-15:00

Ship Happens: The Stormy Seas of Supply Chain Security ^[16]

David Archer ^[17], Endor Labs

15:00-15:30

Afternoon Break

The conference continues in hall Congress B as a single track.

15:30-16:10

From Log4shell to Log4SBOM ^[18]

Piotr P. Karwasz ^[19], Apache Logging Services

16:10-16:40

Not a Good Day: What really happened to kernel.org ^[20]

Leif Nixon ^[21], Combitech

16:40-16:50

Promoting skills development, research and innovation in CyberSecurity

A brief presentation of NCC-SE and Cybernode.se

Christoffer Karsberg, NCC-SE, MSB
Martin Bergling, Cybernode.se, RI.SE

16:50-17:10

Closing of the conference & Raffle

Olle E. Johansson, Edvina AB