[open-regulatory-compliance] Give your feedback on the CRA's vertical st

[Jordan Maris <jordan.maris@xxxxxxxxxxxxxx>]

Dear all,

As the deadline for the application of the CRA draws closer, the vertical standards (specifications which will tell developers how to comply with the CRA for specific product types) are beginning to take shape.

These standards will be the easiest way for developers to comply with the CRA: they will simply need to follow the requirements found within the standards. For that reason, it's absolutely vital that these standards are right!

Thanks to an unprecedented effort by multiple organisations, for the first time ever, drafts of these standards will be made public so that developers, in particular from the Open Source community, can comment on them. This is done in Gitlab (links to each repo provided).

These vertical standards cover:

• Browsers 
• Password Managers
• Antivirus
• VPNs Part 1 and Part 2
• Network Management Systems
• Security Information and Event Management Systems
• Boot Managers
• Public Key Infrastructure
• Virtual Network Interfaces
• Operating Systems
• Routers modems and switches
• Firewalls
• Hypervisors and container runtimes
• Consumer IOT

Some standards are not yet ready or empty. When they are available, you will be able to find them here.

For now, due to restrictions put in place by the standardisation organisations, it is not possible to comment on existing issues raised by others, but I'm hopeful this will change.

It is also not possible to submit merge requests, but if you were to propose changes in the comments, nothing would stop the rapporteurs (many of whom are from the Open Source community) from integrating those proposals 😉.

Let me know if you have any questions!

Best Regards,

--

Jordan Maris
EU Policy Analyst, The Open Source Initiative
tel: +33613141427