Dear ORC Community,
it looks like this summer is pretty packed with documentation and supporting
materials to comply with the different regulations. A few months
back, we already shared the draft version
of the Secure by design and default playbook by ENISA for which we provided feedback. Today the launched the final version of the playbook that you can access here -->
https://www.enisa.europa.eu/publications/enisa-secure-by-design-and-default-playbook
In addition, our colleagues from ENISA has also created a GitHub repository to facilitate the navigation, I think this is a great contribution from their side, the Github repo can be found here -->
https://github.com/enisaeu/enisa-sbd-playbook
We will address all the topics that are popping up in the last days during our first SIG Call on August 17th, meanwhile (if you are not, or already back, from vacation):
- Take a look to the CRA due diligence repository - www.github.com/orcwg/cra-due-diligence - there are several PRs open with content, and it would be great to have more contributions to it.
- Take a look to the final version of the CRA implementation guidelines - many of our comments and proposals made it to the final text.
- Take a look to the work our colleagues from Openchain developed for the CRA.
Cheers,
Juan
-- Juan Rico
Eclipse Foundation: The Community for Open Collaboration and Innovation
Berliner Allee 47, 64295 Darmstadt
Handelsregister: Darmstadt HRB 92821
Managing Directors: Gaël Blondelle, Mike Milinkovich, Michael Plagge