Re: [open-regulatory-compliance] FYI: The minutes for CRA Expert Group M

[Daniel Thompson-Yvetot <denjell@xxxxxxxxxxxxxx>]

I was happy to see the EUCC mentioned, but am also concerned that the various stakeholder opinions diverge in needs for the "risk assessment".

Being clear about the expectations will be essential for any CAB to be able to properly (and neutrally) interpret the risks. In my opinion, the risk assessment must be associated with the four principles the CRA defines:

Availability: Ensuring systems remain operational and accessible when needed
Authenticity: Verifying that data and users are genuine
Integrity: Maintaining data accuracy and preventing unauthorized modifications
Confidentiality: Protecting sensitive information from unauthorized access

Cheers,

On Thu, Mar 6, 2025 at 5:22 PM Scott Lewis via open-regulatory-compliance <open-regulatory-compliance@xxxxxxxxxxx> wrote:

The document references has:  7. List of participants at the end and the
participants are listed by type ...e.g. A, C, D.

Is there a definition of these types somewhere?

Thanks.

On 3/6/2025 6:54 AM, Lars Francke via open-regulatory-compliance wrote:
> https://ec.europa.eu/transparency/expert-groups-register/core/api/front/document/115256/download
> _______________________________________________
> open-regulatory-compliance mailing list
> open-regulatory-compliance@xxxxxxxxxxx
> To unsubscribe from this list, visit https://accounts.eclipse.org
_______________________________________________
open-regulatory-compliance mailing list
open-regulatory-compliance@xxxxxxxxxxx
To unsubscribe from this list, visit https://accounts.eclipse.org