Re: [open-regulatory-compliance] CRA: Online survey for Free Software St

[Lars Francke <lars.francke@xxxxxxxxx>]

Hi Alex,

I just looked at the survey for manufacturers but as a manufacturer I
find it very hard to answer.

Example: "Do you know who develops the open source components that you
use in your products?"
The answer for us is definitely "partially". Do I select yes? no? no answer?
Others with the same uncertainty might pick different than I do for
the exact same situation which makes the results a bit meaningless.

This is just one example. Other questions have the same problem in my
opinion where there is just no strict "yes" or "no" answer.

Another problem I see is that it talks about requirements for Open
source components of which there are none in the CRA as far as I'm
aware so I was again unsure what to answer.

I was so unsure how to answer most questions that I've aborted the
questionnaire after the third or so page.

I do hope the feedback helps as I'd love some data around the CRA.

Cheers,
Lars


On Sun, Jul 13, 2025 at 4:16 PM Alexander Sander via
open-regulatory-compliance <open-regulatory-compliance@xxxxxxxxxxx>
wrote:
>
> Hi all
>
> We created a CRA questionnaire as part of the "Dialogue for
> Cybersecurity". The questionnaires were developed to gain important
> insights into the EU Cyber Resilience Act (CRA) and its impact.
>
> There are questionnaires for Free Software projects, manufacturers and
> potential Free Software stewards.
>
> The responses will help us understand what guidance is needed and this
> will feed into our work across the Free Software ecosystem and with the
> European Commission to support the CRA implementation.
>
> Potential Free Software stewards (EN)
> https://dialog-cybersicherheit.limesurvey.net/146965?lang=en
>
> Free Software projects (EN)
> https://dialog-cybersicherheit.limesurvey.net/241948?lang=en
>
> Manufacturer (EN)
> https://dialog-cybersicherheit.limesurvey.net/582853?lang=en
>
> The questionnaire will be open for responses until August 31. Please
> note that all responses received by July 30 will be included in an
> initial evaluation. These preliminary results will be presented as part
> of a presentation at FrOSCon [1]. Of course, any feedback received after
> July 30 will also be considered in the final analysis. We appreciate
> your participation and support! Note: The feedback will be published
> anonymously. Thank you for your support.
>
> Best
> Alex
>
> [1]
> https://programm.froscon.org/froscon2025/talk/0a656836-cb27-4ef1-80e1-d64c553a96ca/
>
>
> --
> Alexander Sander - Senior Policy Consultant
> Free Software Foundation Europe e.V.
> Revaler Str. 19, 10245 Berlin |
> +49 (0)30 2759 5290 |
> Registered at Amtsgericht Hamburg, VR 17030  |
> (fsfe.org/join)
>
> _______________________________________________
> open-regulatory-compliance mailing list
> open-regulatory-compliance@xxxxxxxxxxx
> To unsubscribe from this list, visit https://accounts.eclipse.org