Re: [open-regulatory-compliance] [EXTERNAL] Re: The attempt of making si

[Becky Hepper <rebecca.r.hepper@xxxxxxxxxxx>]

Is there a way to get a recording of the meeting with Roger Riera?

Best Regards, 

Becky Hepper

Seagate General Information

---

From: open-regulatory-compliance <open-regulatory-compliance-bounces@xxxxxxxxxxx> on behalf of Juan Rico via open-regulatory-compliance <open-regulatory-compliance@xxxxxxxxxxx>
Sent: Sunday, October 12, 2025 3:16 PM
To: Open Regulatory Compliance Working Group <open-regulatory-compliance@xxxxxxxxxxx>
Cc: Juan Rico <juan.rico@xxxxxxxxxxxxxxxxxxxxxx>
Subject: Re: [open-regulatory-compliance] [EXTERNAL] Re: The attempt of making simplified CC guide for the CRA Default category

 

 

This message has originated from an External Source. Please use proper judgment and caution when opening attachments, clicking links, or responding to this email.

Dear all,

I'm opening this conversation again to confirm that our guest tomorrow in our CRA Monday will be Roger Riera, the author to present and discuss about the approach he proposes. Roger is part of the European Commission’s CRA Expert Group as a Type A member, contributing to the effective implementation of the CRA regulation. He is also technical Manager at Applus+ Laboratories, specialising in hardware security with 10 years of experience in the field.

Looking forward to hearing from him and from all of you:) 

See you tomorrow at 16.00 CEST (14.00 UTC) for our Cyber Resilience SIG call and at 17:00 CEST(15.00 UTC). Link to our calendar.

Cheers,

Juan

On Thu, 11 Sept 2025 at 18:51, Alex Talsma (CELA) via open-regulatory-compliance <open-regulatory-compliance@xxxxxxxxxxx> wrote:

Just looking at the copyright statement, looks like the author may be a member of the CRA Expert Group – very encouraging to see someone in that position out and working on implementation guidance / toolkits.

 

• Alex

 

From: open-regulatory-compliance <open-regulatory-compliance-bounces@xxxxxxxxxxx> On Behalf Of August Bournique via open-regulatory-compliance
Sent: Thursday, September 11, 2025 5:09 AM
To: Open Regulatory Compliance Working Group <open-regulatory-compliance@xxxxxxxxxxx>
Cc: August Bournique <august@xxxxxxxxxxxxxxxx>
Subject: [EXTERNAL] Re: [open-regulatory-compliance] The attempt of making simplified CC guide for the CRA Default category

 

It's interesting for sure.  I think it might be missing a few things (or I missed them) such as a discussion of support period requirements, and I couldn't find anything regarding the ability to transfer risk through documentation, something that has come up quite a bit in the vertical standardization efforts.

It's also unclear to me if general products will need to go to this level of documentation, but it's a very neat project.

- August

On Thu, Sep 11, 2025 at 11:32 AM Roman Zhukov via open-regulatory-compliance <open-regulatory-compliance@xxxxxxxxxxx> wrote:

Hi folks,

I'm not sure how many of you have seen this work https://github.com/sCC4CRA/, but this is a brave and nice attempt to flush out a guide for Module A (self-assessment) for Default category PDEs, by making it "the most looking-like" EUCC. I don't necessarily agree with the "certification" anchor and terms, but I think we may want to discuss it at the next ORC meeting to get some learnings, at minimum, as we work on our Whitepapers.

 

Cheers,

--

Roman Zhukov

Principal Architect - Security Communities Lead

Book time with Roman

_______________________________________________
open-regulatory-compliance mailing list
open-regulatory-compliance@xxxxxxxxxxx
To unsubscribe from this list, visit https://accounts.eclipse.org

 

_______________________________________________
open-regulatory-compliance mailing list
open-regulatory-compliance@xxxxxxxxxxx
To unsubscribe from this list, visit https://accounts.eclipse.org