[open-regulatory-compliance] Minutes from the Cyber Resilience SIG meeti

[Juan Rico <juan.rico@xxxxxxxxxxxxxxxxxxxxxx>]

Dear ORC Community,

Today we hosted the Cyber Resilience SIG meeting - you can check the minutes here.

The main topics covered today include:

• The CRA Expert Group reviewed updates to the guidance package, covering vulnerability reporting and support periods, and noted ENISA's initiative to develop SBOM guidance.
• Concerns were raised regarding the ENISA Single Reporting Platform launching on September 11, specifically regarding the need for API automation and the readiness of national regulators.
• The Tech Sovereign Package was discussed, focusing on funding for open source maintainers, identifying critical components, and advocating for open-source-friendly public sector procurement.
• Attendees were reminded to join the AI Special Interest Group (SIG) mailing list ahead of the first meeting scheduled for June 29.
• AOB discussions covered upcoming training sessions for manufacturers on SBOMs, a Code and Compliance event planned for October, and a call for papers for the Nordic Software Security Summit.

If you have any questions when checking the minutes, do not hesitate to reach out to me or share it in the mailing list.

Best regards,

Juan

--

Juan Rico

Senior Manager ORC, Oniro and Cloud Programs | Eclipse Foundation Europe GmbH | X | LinkedIn | YouTube | Instagram | Bluesky | Mastodon

Eclipse Foundation: The Community for Open Collaboration and Innovation

Berliner Allee 47, 64295 Darmstadt

Handelsregister: Darmstadt HRB 92821

Managing Directors: Gaël Blondelle, Mike Milinkovich, Michael Plagge