Digital Products in Europe in the Face of the Cyber Resilience Act (CRA)
summary
Europe requires SBOM for every release for five years, mandates 24‑hour incident reporting with four weeks to remediate, and treats some open‑source stewards differently from manufacturers so liability changes with commercial use. DMA already names Gatekeepers: Alphabet Amazon Apple ByteDance Microsoft Meta and imposes market rules; Apple demands a one million euro bond for third‑party iOS app stores. DORA finalizes in July and enters force January 2025, forcing ICT contract and risk changes.
AI-written summary · about
chapters (9)
- 0:00European digital regulations intro
- 1:18Key terms in EU regulations
- 5:33Digital Markets Act
- 9:12Cyber Resilience Act overview
- 13:10Open source under CRA
- 15:39Product liability implications
- 17:04Digital Operational Resilience Act
- 19:13Digital Services Act
- 21:25Engaging regulators
related talks
39mCherry Blossom and Compliance - An Intro To the EU CRA
27mEU Cyber Resilience Act: What Every Manufacturer Needs to Know
44mThey're coming to regulate you!
32mThe EU Cybersecurity Resilience Act (CRA) - Boring, Scary or Exciting?
25mSecure or Sorry: Your software is now a European Product
53mHow To Stay Compliant With and Take Benefits From the EU CRA (Cyber Resilience Act)
33mImplementing the EU Cyber Resilience Act (CRA)
31mCopyleft and the EU CRA