| [orc-ai-sig] ORC events this week |
The ORC Learning Hub is developing practical training to help organisations and open source communities understand and prepare for the Cyber Resilience Act (CRA). In this CRA Monday session, we’ll preview the next training module, Introduction to SBOMs and Vulnerability Management, and invite the ORC community to help us validate the course materials before the module is recorded and published. The module introduces Software Bills of Materials (SBOMs) and vulnerability management in the context of CRA expectations, including:
Join us to review the material, share your expertise, and help shape the next module of the ORC Learning Hub.
Location: https://meet.jit.si/MainHeadquartersDismissWell
The CRA‑Attestations aims to explore how open source voluntary security attestations could help manufacturers in supporting their compliance journey under the Cyber Resilience Act (CRA). These attestations would provide a structured way for stewards and maintainers to signal that a software component meets essential security requirements, helping manufacturers, regulators, and end-users navigate CRA obligations.
Given the technical and procedural complexity involved—defining attestation schemas, issuance and revocation processes, tooling, and compatibility with CRA enforcement
Eclipse Foundation: The Community for Open Collaboration and Innovation
Handelsregister: Darmstadt HRB 92821
Managing Directors: Gaël Blondelle, Mike Milinkovich, Michael Plagge
BEGIN:VCALENDAR VERSION:2.0 PRODID:-//Google Apps Script//Weekly Event Report//EN CALSCALE:GREGORIAN METHOD:PUBLISH BEGIN:VEVENT UID:2cl99chagb4bs5ihif41ni1pet@xxxxxxxxxx DTSTAMP:20261018T114315Z DTSTART:20261019T140000Z DTEND:20261019T150000Z SUMMARY:[AI SIG] AI Policy and Compliance SIG DESCRIPTION:Meeting info:<br><a href="https://github.com/orcwg/orcwg/blob/main/MEETINGS.md"; target="_blank"><u>https://github.com/orcwg/orcwg/blob/main/MEETINGS.md</u></a><br><br>Agenda:<br><a href="https://github.com/orcwg/orcwg/tree/main/ai-policy-and-compliance-sig/minutes";>https://github.com/orcwg/orcwg/tree/main/ai-policy-and-compliance-sig/minutes</a> LOCATION:https://meet.jit.si/KeenTentsRepairExtensively STATUS:CONFIRMED SEQUENCE:0 END:VEVENT END:VCALENDAR
BEGIN:VCALENDAR VERSION:2.0 PRODID:-//Google Apps Script//Weekly Event Report//EN CALSCALE:GREGORIAN METHOD:PUBLISH BEGIN:VEVENT UID:nl03qlb2dp6n76clhq9fvkddlo_R20260714T133000@xxxxxxxxxx DTSTAMP:20261018T114315Z DTSTART:20261020T133000Z DTEND:20261020T143000Z SUMMARY:[CYBER SIG] CRA Attestations\, Stewards and Maintainers DESCRIPTION:<p><b>Location: </b><a href="https://meet.jit.si/MainHeadquartersDismissWell";>https://meet.jit.si/MainHeadquartersDismissWell</a></p><p>The CRA‑Attestations aims to explore how open source voluntary security attestations could help manufacturers in supporting their compliance journey under the <b>Cyber Resilience Act (CRA)</b>. These attestations would provide a structured way for stewards and maintainers to signal that a software component meets essential security requirements\, helping manufacturers\, regulators\, and end-users navigate CRA obligations.</p><p>Given the technical and procedural complexity involved—defining attestation schemas\, issuance and revocation processes\, tooling\, and compatibility with CRA enforcement</p> LOCATION:https://meet.jit.si/MainHeadquartersDismissWell STATUS:CONFIRMED SEQUENCE:0 END:VEVENT END:VCALENDAR
BEGIN:VCALENDAR VERSION:2.0 PRODID:-//Google Apps Script//Weekly Event Report//EN CALSCALE:GREGORIAN METHOD:PUBLISH BEGIN:VEVENT UID:1ql962e8oilm14fna0sdf15713_R20260702T130000@xxxxxxxxxx DTSTAMP:20261018T114315Z DTSTART:20261022T130000Z DTEND:20261022T140000Z SUMMARY:🛡️[CYBER SIG] Due Diligence & Vulnerability Handling Task Force DESCRIPTION:The Vulnerability Handling Task Force provides input to the SIG in aspects related to stewards and due diligence. It may also produce white papers.<br><br>Agenda &\; Minutes: <a href="https://github.com/orcwg/orcwg/tree/main/cyber-resilience-sig/task-forces/vulnerability-handling-tf/minutes";>https://github.com/orcwg/orcwg/tree/main/cyber-resilience-sig/task-forces/vulnerability-handling-tf/minutes</a><br><br>Meeting info: <a href="https://github.com/orcwg/orcwg/blob/main/MEETINGS.md#vulnerability-handling-task-force-call"; target="_blank"><u>https://github.com/orcwg/orcwg/blob/main/MEETINGS.md#vulnerability-handling-task-force-call</u></a><br><br>Jitsi meeting: <a href="https://meet.jit.si/moderated/afe9a4643dd84fb5123e1a745a0fd90b749a44c6fb91d582505628215ee52d98"; target="_blank"><u><u>https://meet.jit.si/moderated/afe9a4643dd84fb5123e1a745a0fd90b749a44c6fb91d582505628215ee52d98</u></u></a> LOCATION:https://meet.jit.si/moderated/afe9a4643dd84fb5123e1a745a0fd90b749a44c6fb91d582505628215ee52d98 STATUS:CONFIRMED SEQUENCE:0 END:VEVENT END:VCALENDAR
BEGIN:VCALENDAR VERSION:2.0 PRODID:-//Google Apps Script//Weekly Event Report//EN CALSCALE:GREGORIAN METHOD:PUBLISH BEGIN:VEVENT UID:4j5ahsgv2tmkogfg5kpg1fq3tj_R20260817T150000@xxxxxxxxxx DTSTAMP:20261018T114315Z DTSTART:20261019T150000Z DTEND:20261019T160000Z SUMMARY:CRA Mondays | Introduction to Software bill of materials (SBOM): CRA Training Community Review DESCRIPTION:<p dir="auto">The ORC Learning Hub is developing practical training to help organisations and open source communities understand and prepare for the Cyber Resilience Act (CRA). In this CRA Monday session\, we’ll preview the next training module\, Introduction to SBOMs and Vulnerability Management\, and invite the ORC community to help us validate the course materials before the module is recorded and published. The module introduces Software Bills of Materials (SBOMs) and vulnerability management in the context of CRA expectations\, including:</p><ul dir="auto"><li>SBOM fundamentals</li><li>The role of SBOMs in risk assessment</li><li>Vulnerability handling obligations</li><li>The tooling landscape This is an interactive review session. We’re looking for feedback from across the ORC community to help identify gaps\, clarify concepts\, and ensure the training reflects the practical needs of organisations preparing for the CRA.</li></ul><p dir="auto">Join us to review the material\, share your expertise\, and help shape the next module of the <a href="https://orcwg.org/training/";><u>ORC Learning Hub</u></a>.</p> STATUS:CONFIRMED SEQUENCE:0 END:VEVENT END:VCALENDAR