Nordic Software Security SummitNordic Software Security Summit
  • Conference 2025
    • Conference registration
    • Overview
      • Quick view: Workshops and talks
      • Workshops (Wednesday)
      • Agenda Thursday track one
      • Agenda Thursday track two
      • Agenda Friday track one
      • Agenda Friday track two
    • Speakers 2025
    • Venue
    • Organiser
      • Edvina AB
  • Partners
    • Organisational partners
  • Topics
    • Cyber Resilience Act (CRA)
    • Software Bill of Materials (SBOM)
    • Secure by design software
    • Software Supply Chain Security
    • Open Source Software
  • Blog

Talks

/

  • Adding Security to DevOps
  • Compiler Options Hardening for C and C++
  • CRA and compliance – what to do?
  • CRA, CE marking and a new perception of quality
  • CVEMITRECVSSNVDCNAOSS WTF
  • Empowering Organisations: Procuring a Secure Software Supply Chain 
  • From Log4jShell to Log4SBOM
  • High quality SBOMs for C/C++ and native code
  • How the Erlang Ecosystem is leaning into better Cybersecurity
  • Not a Good Day: What really happened to kernel.org?
  • OpenSSF – Addressing OSS Security
  • Product, service and software security in the EU: Beyond the CRA
  • SBOMs that you can trust – the good, the bad, and the ugly.
  • Securing the Software supply chain: Artefact and Commit Signing
  • Ship Happens: The Stormy Seas of Supply Chain Security
  • Support software certification by testing actual code against security requirements
  • Taming the Software Supply Chain
  • The Legal Department as a Business Partner 
  • To be hit by a cyber attack – anything but an IT issue
  • Who are you depending on? Due diligence in the regulated software industry

One day training and two day conference covering the coming legislation on the software industry

Early 2026
Hotel Birger Jarl, Stockholm, Sweden
Follow us on LinkedIn !

Register today!

Conference Agenda
Overview
Wednesday: Workshops
Thursday track one
Thursday track two
Friday track one
Friday track two

Partners 2026
Cybernode.se
Dataföreningen Väst
NCC-SE
Eclipse Foundation
ORCWG
OpenSSF
OWASP
SIG Security

News

  • Sorry, we have to postpone the conference
  • Registration is open with early bird pricing!
  • 3…. 2… 1… Stay tuned for launch!
  • Extended call for papers
  • Learn CRA in Manchester, UK or Stockholm, Sweden!

Keywords

• CRA, NIS2, RED-DA, EU, EU-CC
• CyberSecurity
• SBOM, CycloneDX, SPDX, VEX
• ISO 27001, Common Criteria
• DevSecOps
• Software supply chain security
• Dependency management
• Vulnerability management
• Open Source Software
• OSPO, Open Source Program Offices
• Open source compliance

About

  • Conference code of conduct
  • Terms and conditions for registration
  • LinkedIn
  • Mastodon
  • Facebook

  • Conference 2025
  • Partners
  • Topics
  • Blog
© Copyright 2024-2025 Edvina AB, Sollentuna, Sweden.