Secure or Sorry: Your software is now a European Product
summary
The EU makes software a regulated product: the Cyber Resilience Act is in force since December 2024 with phased obligations (reporting from Sept 2026, full application Dec 2027). Key demands are concrete: SBOM for every version kept 10 years, declaration of conformity, 5 years security updates, and rapid incident report within a day. Critical software needs annual conformity assessments; liability is joint and several with no‑fault claims and fines scaled to company size.
AI-written summary · about
chapters (9)
- 0:00Introduction and definitions
- 2:10The metaphor of the egg
- 3:50The Blue Book explained
- 5:54What are digital products
- 8:19Cyber Resilience Act
- 14:37Product liability directive
- 17:11Open source software stewards
- 18:45Best practices for compliance
- 20:59Commercial open source model
related talks
44mThey're coming to regulate you!
22mEU Cyber Resilience Act - A Product Owner’s Approach
53mThe EU CRA Readiness for Contributors and Maintainers : A Survival Toolkit
27mEU Cyber Resilience Act: What Every Manufacturer Needs to Know
39mCherry Blossom and Compliance - An Intro To the EU CRA
59mMerging Security and Compliance: Perspectives on Emerging Regulations and Best Practices
39mAll your code belongs to Policy Makers, Politicians and the Law
30mThe EU's Cybersecurity Resilience Act (CRA) has Begun – How Can Manufacturers Confidently Addres ...