Skip to main content
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]
Re: [open-regulatory-compliance] CRA Standardization deep-dive sessions
Oliver and others,

As one of the rapporteurs on the ETSI vertical standards project I would like to add a couple of details covering my personal understanding of these sessions (Not speaking on behalf of ETSI in any way):

1) One intent of the sessions is to provide a space for dialogue between public commenters and rapporteurs. 
To that end it's likely most effective to make a comment on the drafts before the meeting and then come prepared to explain the comment and discuss it. When making comments it's worth knowing that comments will get more attention if they i) contain a proposed solution ii) are related to a specific requirement or mitigation in the standard - at this point sweeping changes to structure are unlikely and generally they are governed by decisions made above the level of the individual standard. 

2) There will be several additional discussions added for other verticals.

I would add in general that before engaging with the draft standards it is necessary to understand at least a bit how the CRA works. Key points are:
  • CRA standards are product safety related, and don't include process requirements - that is they don't cover how the product is made, only the product itself.  These standards are risk focused, not process focused.
  • Verticals are not capable of or intended to cover the entire breadth of products that can perform the vertical function. The verticals themselves may also not follow popular understanding of the product type.  They are defined by the EC's technical descriptions. The long term intent here is to create a stable structure for vertical standards that can be added to with additional verticals over time as proposed to the public.
  • Some areas such as Remote Data Processing, Product Life Cycle, Cryptography and Vulnerability Handling are intended to be covered either at a later point, by the horizontal standards, or elsewhere. The details are unlikely to be in the current drafts.
  • FOSS concerns, i.e. "What is an OSS steward anyway?!?" aren't addressed in these verticals.  To the extent the CRA standards will touch on these issues, it will be in the horizontal standards.   
If anyone has additional questions I am happy to try to answer them to the best of my ability.

Sincerely,

August Bournique 

On Mon, Dec 15, 2025 at 10:34 AM Fendt, Oliver via open-regulatory-compliance <open-regulatory-compliance@xxxxxxxxxxx> wrote:

Hi Juan,

 

is there a chance to record the meetings?

 

Ciao

Oliver

 

Von: open-regulatory-compliance <open-regulatory-compliance-bounces@xxxxxxxxxxx> Im Auftrag von Juan Rico via open-regulatory-compliance
Gesendet: Montag, 15. Dezember 2025 10:02
An: Open Regulatory Compliance Working Group <open-regulatory-compliance@xxxxxxxxxxx>
Cc: Juan Rico <juan.rico@xxxxxxxxxxxxxxxxxxxxxx>
Betreff: [open-regulatory-compliance] CRA Standardization deep-dive sessions

 

Dear ORC Community,

 

Our colleagues working at ETSI vertical standard definition have prepared four sessions to go in depth into current drafts and the work the rapporteurs are doing.

Click on the hyperlink to register to the session(s) of your choice:

  1. 16 December, 14:00 – 15:30 CET: Routers, modems & switches
  2. 16 December, 15:30 – 17:00 CET: Hypervisors and container runtime systems
  3. 17 December, 14:00 – 15:30 CET: Firewalls
  4. 17 December, 15:30 – 17:00 CET: Antivirus

 

If you have problems trying to access to them, please let me know.

 

Best regards,

Juan

 

--

Juan Rico

Senior Manager ORC, Oniro and Cloud Programs | Eclipse Foundation Europe GmbH | X | LinkedIn | YouTube | Instagram | Bluesky | Mastodon

Eclipse Foundation: The Community for Open Collaboration and Innovation

 

 

Berliner Allee 47, 64295 Darmstadt

Handelsregister: Darmstadt HRB 92821

Managing Directors: Gaël Blondelle, Mike Milinkovich, Michael Plagge

_______________________________________________
open-regulatory-compliance mailing list
open-regulatory-compliance@xxxxxxxxxxx
To unsubscribe from this list, visit https://accounts.eclipse.org


--

Back to the top