[{"data":1,"prerenderedAt":494},["ShallowReactive",2],{"site:settings":3,"site:navigation":49,"site:footer":126,"page:\u002Fblog\u002Focr-monthly-sept2025":188,"sections:\u002Fblog\u002Focr-monthly-sept2025":485,"feed:\u002Fblog\u002Focr-monthly-sept2025":488,"breadcrumbs:\u002Fblog\u002Focr-monthly-sept2025":489},{"id":4,"title":5,"callForAction":6,"description":9,"extension":10,"featuredContentPublishTarget":11,"keywords":12,"logo":18,"logoWidth":19,"meta":20,"search":21,"seoTitleSuffix":25,"skipLinkText":26,"socialImage":27,"socials":30,"stem":47,"__hash__":48},"settings\u002Fdata\u002Fsettings.yml","Open Regulatory Compliance Working Group",{"text":7,"href":8},"Get involved","\u002Fparticipate\u002F","The open source community is collaborating to establish common specifications for secure software development based on open source best practices.","yml","orc",[13,14,15,16,17],"regulatory compliance","cybersecurity processes","royalty-free patent licence","open source community collaboration","Eclipse Foundation Specification Process","\u002Fimages\u002Forc-logo.png",120,{},{"label":22,"placeholder":23,"menuLabel":24},"Search","Search the site…","Menu"," | Open Regulatory Compliance Working Group","Skip to main content",{"backgroundImage":28,"eyebrow":29},"\u002Fimages\u002Fog\u002Fbackground.jpg","orcwg.org",[31,35,39,43],{"name":32,"icon":33,"url":34},"LinkedIn","fa6-brands:linkedin-in","https:\u002F\u002Fwww.linkedin.com\u002Fshowcase\u002Fopen-regulatory-compliance\u002F",{"name":36,"icon":37,"url":38},"YouTube","fa6-brands:youtube","https:\u002F\u002Fwww.youtube.com\u002F@ORCWG",{"name":40,"icon":41,"url":42},"Bluesky","fa6-brands:bluesky","https:\u002F\u002Fbsky.app\u002Fprofile\u002Forcwg.org",{"name":44,"icon":45,"url":46},"Mastodon","fa6-brands:mastodon","https:\u002F\u002Ffosstodon.org\u002F@orcwg","data\u002Fsettings","bxtnzYEG4TQ27x8O_VKQIF-gc2dr-DNwF9_OpAZy3LA",{"id":50,"extension":10,"main":51,"meta":123,"stem":124,"__hash__":125},"navigation\u002Fdata\u002Fnavigation.yml",[52,70,82,99],{"text":53,"children":54},"About",[55,58,61,64,67],{"text":56,"href":57},"ORC Working Group","\u002Fabout\u002F",{"text":59,"href":60},"Cyber Resilience SIG","\u002Fspecial-interest-groups\u002Fcyber-resilience\u002F",{"text":62,"href":63},"AI Policy & Compliance SIG","\u002Fspecial-interest-groups\u002Fai-policy-and-compliance\u002F",{"text":65,"href":66},"Steering Committee","\u002Fcommittees\u002Fsteering-committee\u002F",{"text":68,"href":69},"Meeting Minutes","\u002Fcommittees\u002Fminutes\u002F",{"text":71,"children":72},"Membership",[73,76,79],{"text":74,"href":75},"Our Members","\u002Fmembership\u002F",{"text":77,"href":78},"Become a Member","\u002Fmembership\u002Fbecome-a-member\u002F",{"text":80,"href":81},"Participation and Membership FAQ","\u002Fabout\u002Fparticipation-and-membership-faq\u002F",{"id":83,"text":84,"children":85},"cra","Cyber Resilience Act",[86,89,93,96],{"text":87,"href":88},"About CRA","\u002Fcra\u002Fabout",{"text":90,"href":91,"external":92},"CRA FAQ","https:\u002F\u002Fcra.orcwg.org\u002F",true,{"text":94,"href":95},"CRA Resources","\u002Fcra\u002Fresources",{"text":97,"href":98,"external":92},"CRA Hub on GitHub","https:\u002F\u002Fgithub.com\u002Forcwg\u002Fcra-hub",{"text":100,"children":101},"Resources",[102,105,108,111,114,117,120],{"text":103,"href":104},"Events","\u002Fevents\u002F",{"text":106,"href":107},"Community Calendar","\u002Fresources\u002Fcalendar\u002F",{"text":109,"href":110},"Blog","\u002Fblog\u002F",{"text":112,"href":113},"Videos","\u002Fresources\u002Fvideos\u002F",{"text":115,"href":116},"Learning Hub","\u002Ftraining\u002F",{"text":118,"href":119},"Marketing Resources","\u002Fresources\u002Fmarketing-resources\u002F",{"text":121,"href":122,"external":92},"ORC Store","https:\u002F\u002Feclipse-foundation.store\u002Fcollections\u002Fopen-regulatory-compliance-orc",{},"data\u002Fnavigation","XYDVypNX67n8V4VQI_JTrw0cI16uV5jtctVXjN-DeKo",{"id":127,"backToTopText":128,"copyright":129,"extension":10,"manageCookiesText":130,"meta":131,"sections":132,"socialsHeading":185,"stem":186,"__hash__":187},"footer\u002Fdata\u002Ffooter.yml","Back to the top","Copyright © Eclipse Foundation AISBL. All Rights Reserved.","Manage Cookies",{},[133,150,169],{"id":134,"heading":135,"links":136},"footer-eclipse-foundation","Eclipse Foundation",[137,139,142,145,147],{"text":53,"href":138},"https:\u002F\u002Fwww.eclipse.org\u002Forg\u002F",{"text":140,"href":141},"Projects","https:\u002F\u002Fprojects.eclipse.org\u002F",{"text":143,"href":144},"Collaborations","https:\u002F\u002Fwww.eclipse.org\u002Fcollaborations\u002F",{"text":71,"href":146},"https:\u002F\u002Fwww.eclipse.org\u002Fmembership\u002F",{"text":148,"href":149},"Sponsor","https:\u002F\u002Fwww.eclipse.org\u002Fsponsor\u002F",{"id":151,"heading":152,"showManageCookies":92,"links":153},"footer-legal","Legal",[154,157,160,163,166],{"text":155,"href":156},"Privacy Policy","https:\u002F\u002Fwww.eclipse.org\u002Flegal\u002Fprivacy\u002F",{"text":158,"href":159},"Terms of Use","https:\u002F\u002Fwww.eclipse.org\u002Flegal\u002Fterms-of-use\u002F",{"text":161,"href":162},"Compliance","https:\u002F\u002Fwww.eclipse.org\u002Flegal\u002Fcompliance\u002F",{"text":164,"href":165},"Code of Conduct","https:\u002F\u002Fwww.eclipse.org\u002Forg\u002Fdocuments\u002FCommunity_Code_of_Conduct.php",{"text":167,"href":168},"Legal Resources","https:\u002F\u002Fwww.eclipse.org\u002Flegal\u002F",{"id":170,"heading":171,"links":172},"footer-more","More",[173,176,179,182],{"text":174,"href":175},"Report a Vulnerability","https:\u002F\u002Fwww.eclipse.org\u002Fsecurity\u002F",{"text":177,"href":178},"Service Status","https:\u002F\u002Fstatus.eclipse.org\u002F",{"text":180,"href":181},"Contact Us","https:\u002F\u002Fwww.eclipse.org\u002Forg\u002Ffoundation\u002Fcontact.php",{"text":183,"href":184},"Support","https:\u002F\u002Fwww.eclipse.org\u002Fprojects\u002Fsupport\u002F","Follow Us:","data\u002Ffooter","C-lpCHl9crwF3iQyRSh8y5g9ez5YgF4pi8aTv4pFLBM",{"id":189,"title":190,"aliases":191,"author":192,"body":193,"breadcrumbTitle":191,"breadcrumbs":191,"date":478,"description":191,"extension":479,"featuredFooter":191,"keywords":191,"meta":480,"navigation":92,"path":481,"redirectUrl":191,"seo":482,"seoTitle":191,"socialImage":191,"stem":483,"summary":191,"typography":191,"visibility":191,"width":191,"__hash__":484},"blog\u002Fblog\u002Focr-monthly-sept2025.md","ORC Monthly: FAQ Momentum, Code & Compliance, and EU Consultations",null,"Juan Rico",{"type":194,"value":195,"toc":467},"minimark",[196,219,222,234,239,326,330,341,345,354,358,391,395,411,415,418,441,445],[197,198,199,200,207,208,213,214,218],"p",{},"As we move into autumn, the momentum in our community continues to build. A particular highlight is the upcoming ",[201,202,206],"a",{"href":203,"rel":204},"https:\u002F\u002Fwww.eclipse-foundation.events\u002Fevent\u002FCode-and-compliance-Community-Day-2025\u002Fsummary",[205],"nofollow","Code & Compliance Community Day 2025",", taking place 22–23 October. The ",[201,209,212],{"href":210,"rel":211},"https:\u002F\u002Fwww.eclipse-foundation.events\u002Fevent\u002FCode-and-compliance-Community-Day-2025\u002Fagenda-at-glance",[205],"program"," is shaping up beautifully, with speakers being announced daily. This is your opportunity to connect with leading voices at the intersection of software compliance and open source. So now is the time to ",[201,215,217],{"href":203,"rel":216},[205],"register"," and secure your spot.",[197,220,221],{},"We look forward to seeing many of you there as we continue to explore how open source can drive resilience, trust, and compliance across digital ecosystems.",[197,223,224,228,231],{},[225,226,227],"em",{},"Timo Perala and Dirk-Willem van Gulik",[229,230],"br",{},[225,232,233],{},"ORC co-chairs",[235,236,238],"h2",{"id":237},"whats-new","What’s New",[240,241,242,250,261,279,291,302,314],"ul",{},[243,244,245,249],"li",{},[246,247,248],"strong",{},"Momentum Behind the CRA FAQ",": The FAQ work has been revamped, with the proposal of an editorial structure and reorganization of the topics and processes, it will be easier to consume and contribute.",[243,251,252,255,256,260],{},[246,253,254],{},"Call for Events",": Do you have an upcoming event of interest to the ORC community? Share it with us at ",[201,257,259],{"href":258},"mailto:news@eclipse.org","news@eclipse.org",".",[243,262,263,266,267,272,273,278],{},[246,264,265],{},"New Resources for New Members:"," A fresh “how to contribute” ",[201,268,271],{"href":269,"rel":270},"https:\u002F\u002Fyoutu.be\u002FQamKa_fcyUo",[205],"video"," and ",[201,274,277],{"href":275,"rel":276},"https:\u002F\u002Forcwg.org\u002Fblog\u002Fhow-to-contribute\u002F",[205],"blog"," are now available to help onboard newcomers.",[243,280,281,284,285,290],{},[246,282,283],{},"OSS Stewards and the CRA White Paper:"," Work is progressing on the ",[201,286,289],{"href":287,"rel":288},"https:\u002F\u002Fgithub.com\u002Forcwg\u002Forcwg\u002Fblob\u002Fmain\u002Fcyber-resilience-sig\u002Fwhitepapers\u002Fstewards-and-cra.md",[205],"Open Source Software Stewards and CRA"," white paper, which will serve as a key reference for understanding responsibilities under the Cyber Resilience Act. Join the vulnerability handling task force meeting to get engage and contribute to it.",[243,292,293,296,297,260],{},[246,294,295],{},"ETSI launches early public consultations on draft CRA vertical standards",": For the first time, ETSI is making drafts of standards available for public consultation much earlier than usual in the standardisation process. This pilot initiative puts into practice two key principles of international standardisation & ETSI’s values: openness and inclusiveness. ",[201,298,301],{"href":299,"rel":300},"https:\u002F\u002Fwww.stan4cra.eu\u002Fetsi-tc-cyber?utm_source=linkedin&utm_medium=social&utm_campaign=etsi-early-consultation-tc-cyber",[205],"STAN4CR",[243,303,304,307,308,313],{},[246,305,306],{},"EU Survey on Critical Open Source Software"," – The ",[201,309,312],{"href":310,"rel":311},"https:\u002F\u002Fec.europa.eu\u002Feusurvey\u002Frunner\u002FFOSSEPS_Governance_and_Sustainability_Survey",[205],"European Commission conducted a survey"," on the governance and sustainability of critical open source software. It aims to identify best practices, shape future EU policies, and strengthen digital sovereignty. The survey was scheduled to close on 5 October 2025.",[243,315,316,319,320,325],{},[246,317,318],{},"Public Consultations:"," The European Commission has launched a consultation on the ",[201,321,324],{"href":322,"rel":323},"https:\u002F\u002Fsingle-market-economy.ec.europa.eu\u002Fnews\u002Fcommission-seeks-views-future-european-standardisation-2025-09-24_en",[205],"revision of the Standardisation Regulation",". This is an opportunity to provide views on the future of European standardisation and its role in supporting innovation and competitiveness.",[235,327,329],{"id":328},"overheard","Overheard",[197,331,332],{},[201,333,336],{"href":334,"rel":335},"https:\u002F\u002Fwww.linkedin.com\u002Fposts\u002Fdaniel-thompson-yvetot-a98301222_hey-linkedin-your-webview-is-not-secure-activity-7369326902353821696-pV6R?utm_source=share&utm_medium=member_desktop&rcm=ACoAAAYPUqEBp0WKWGph_vgaFZs7BihQcqkB-_o",[205],[337,338],"img",{"alt":339,"src":340},"Daniel Thompson-Yvetot's LinkedIn post the website's security according to Google","\u002Fblog\u002Focr-monthly-sept2025\u002Fimages\u002Fsept-overheard.png",[235,342,344],{"id":343},"in-the-news","In the news",[240,346,347],{},[243,348,349],{},[201,350,353],{"href":351,"rel":352},"https:\u002F\u002Fwww.iotinsider.com\u002Findustries\u002Fsecurity\u002Fonekey-report-reveals-the-cra-is-not-being-prioritised\u002F%20",[205],"ONEKEY report reveals the CRA is not being prioritised",[235,355,357],{"id":356},"upcoming-events","Upcoming Events",[240,359,360,368,376,383],{},[243,361,362,367],{},[201,363,366],{"href":364,"rel":365},"https:\u002F\u002Fwww.etsi.org\u002Fevents\u002Fupcoming-events\u002F2481-etsi-security-conference-oct2025",[205],"ETSI Security Conference 2025"," | 6-9 October 2025",[243,369,370,375],{},[201,371,374],{"href":372,"rel":373},"https:\u002F\u002Fwww.enisa.europa.eu\u002Fevents\u002Fcra-making-the-eu-market-resilient",[205],"CRA – Making the EU Market Resilient"," | 8 October 2025",[243,377,378,382],{},[201,379,381],{"href":203,"rel":380},[205],"Code & Compliance Community Day"," | 22-23 October 2025",[243,384,385,390],{},[201,386,389],{"href":387,"rel":388},"https:\u002F\u002Fdigitalresilienceforum.com\u002F",[205],"Digital Resilience Forum"," | 29 October 2025",[235,392,394],{"id":393},"recent-talks-events","Recent Talks & Events",[240,396,397,404],{},[243,398,399],{},[201,400,403],{"href":401,"rel":402},"https:\u002F\u002Fyoutu.be\u002FNglPCEu4pok",[205],"CRA Mondays | Unlocking Software Supply Chain Security: Updates from Ecma TC54 and OWASP",[243,405,406],{},[201,407,410],{"href":408,"rel":409},"https:\u002F\u002Fyoutu.be\u002FJnk_I2mI5xQ",[205],"CRA Mondays | Why Do You Trust Software? Operationalizing CRA with the Eclipse Trustable Software Framework",[235,412,414],{"id":413},"welcome-orc-members","Welcome ORC Members",[197,416,417],{},"The following members joined in September 2025:",[240,419,420,427,434],{},[243,421,422],{},[201,423,426],{"href":424,"rel":425},"https:\u002F\u002Fwww.ifross.org\u002F",[205],"ifrOSS",[243,428,429],{},[201,430,433],{"href":431,"rel":432},"https:\u002F\u002Fossmalta.eu\u002F",[205],"Open Source Society Malta",[243,435,436],{},[201,437,440],{"href":438,"rel":439},"https:\u002F\u002Fwww.osadl.org\u002F",[205],"Open Source Automation Development Lab (OSADL)",[235,442,444],{"id":443},"how-to-participate","How to Participate",[240,446,447,453,460],{},[243,448,449],{},[201,450,452],{"href":98,"rel":451},[205],"Learn",[243,454,455],{},[201,456,459],{"href":457,"rel":458},"https:\u002F\u002Fgithub.com\u002Forcwg",[205],"Contribute",[243,461,462],{},[201,463,466],{"href":464,"rel":465},"https:\u002F\u002Forcwg.org\u002Fmembership\u002F",[205],"Join the Working Group",{"title":468,"searchDepth":469,"depth":469,"links":470},"",2,[471,472,473,474,475,476,477],{"id":237,"depth":469,"text":238},{"id":328,"depth":469,"text":329},{"id":343,"depth":469,"text":344},{"id":356,"depth":469,"text":357},{"id":393,"depth":469,"text":394},{"id":413,"depth":469,"text":414},{"id":443,"depth":469,"text":444},"2025-10-06","md",{},"\u002Fblog\u002Focr-monthly-sept2025",{"title":190},"blog\u002Focr-monthly-sept2025","H-hcYaB4e9Yc3hp2PcPSQ0zoDkIGzWLrGL_Pplk6t1Y",[486],{"path":487,"visibility":191},"\u002Fblog",false,[490,493],{"path":491,"text":492},"\u002F","ORC",{"path":487,"text":109},1792684543117]