Dear all,
You can find here the full minutes of our last meeting.
Bbut, here is a brief summary of the main points and links from the latest Cyber Resilience SIG meeting:
- Action Plan on Cybersecurity and AI: Key Action 6 focuses on the Critical Open Source Resilience Campaign. ENISA is hosting a hybrid workshop on vulnerability management in the age of AI in Brussels on November 25 (registration closes October 30 via the EU Survey link). See the EU Action Plan on Cybersecurity and AI.
- ENISA Technical Advisory on SBOMs: The introductory guidance on SBOM purpose, formats, and technical choices is published. Read the ENISA Technical Advisory for SBOMs.
- CRA – AI Act Requirement Mapping: An initial exercise mapping overlaps between the two regulations was published. Review the CRA - AI Act Requirement Mapping Discussion.
- Attestations & Due Diligence: Requirement mapping from the ENISA Secure by Design playbook was shared. Work on Due Diligence is ongoing—check out the Attestations Requirement Mapping, review open Due Diligence PRs, or contribute to Due Diligence Issues.
- Marketing Update: Code and Compliance takes place tomorrow. The third CRA training module has been recorded and will launch in November along with SBOM materials.
Best regards,
Juan
