[{"data":1,"prerenderedAt":478},["ShallowReactive",2],{"site:settings":3,"site:navigation":49,"site:footer":126,"page:\u002Fblog\u002Forc-monthly-aug2025":188,"sections:\u002Fblog\u002Forc-monthly-aug2025":469,"feed:\u002Fblog\u002Forc-monthly-aug2025":472,"breadcrumbs:\u002Fblog\u002Forc-monthly-aug2025":473},{"id":4,"title":5,"callForAction":6,"description":9,"extension":10,"featuredContentPublishTarget":11,"keywords":12,"logo":18,"logoWidth":19,"meta":20,"search":21,"seoTitleSuffix":25,"skipLinkText":26,"socialImage":27,"socials":30,"stem":47,"__hash__":48},"settings\u002Fdata\u002Fsettings.yml","Open Regulatory Compliance Working Group",{"text":7,"href":8},"Get involved","\u002Fparticipate\u002F","The open source community is collaborating to establish common specifications for secure software development based on open source best practices.","yml","orc",[13,14,15,16,17],"regulatory compliance","cybersecurity processes","royalty-free patent licence","open source community collaboration","Eclipse Foundation Specification Process","\u002Fimages\u002Forc-logo.png",120,{},{"label":22,"placeholder":23,"menuLabel":24},"Search","Search the site…","Menu"," | Open Regulatory Compliance Working Group","Skip to main content",{"backgroundImage":28,"eyebrow":29},"\u002Fimages\u002Fog\u002Fbackground.jpg","orcwg.org",[31,35,39,43],{"name":32,"icon":33,"url":34},"LinkedIn","fa6-brands:linkedin-in","https:\u002F\u002Fwww.linkedin.com\u002Fshowcase\u002Fopen-regulatory-compliance\u002F",{"name":36,"icon":37,"url":38},"YouTube","fa6-brands:youtube","https:\u002F\u002Fwww.youtube.com\u002F@ORCWG",{"name":40,"icon":41,"url":42},"Bluesky","fa6-brands:bluesky","https:\u002F\u002Fbsky.app\u002Fprofile\u002Forcwg.org",{"name":44,"icon":45,"url":46},"Mastodon","fa6-brands:mastodon","https:\u002F\u002Ffosstodon.org\u002F@orcwg","data\u002Fsettings","bxtnzYEG4TQ27x8O_VKQIF-gc2dr-DNwF9_OpAZy3LA",{"id":50,"extension":10,"main":51,"meta":123,"stem":124,"__hash__":125},"navigation\u002Fdata\u002Fnavigation.yml",[52,70,82,99],{"text":53,"children":54},"About",[55,58,61,64,67],{"text":56,"href":57},"ORC Working Group","\u002Fabout\u002F",{"text":59,"href":60},"Cyber Resilience SIG","\u002Fspecial-interest-groups\u002Fcyber-resilience\u002F",{"text":62,"href":63},"AI Policy & Compliance SIG","\u002Fspecial-interest-groups\u002Fai-policy-and-compliance\u002F",{"text":65,"href":66},"Steering Committee","\u002Fcommittees\u002Fsteering-committee\u002F",{"text":68,"href":69},"Meeting Minutes","\u002Fcommittees\u002Fminutes\u002F",{"text":71,"children":72},"Membership",[73,76,79],{"text":74,"href":75},"Our Members","\u002Fmembership\u002F",{"text":77,"href":78},"Become a Member","\u002Fmembership\u002Fbecome-a-member\u002F",{"text":80,"href":81},"Participation and Membership FAQ","\u002Fabout\u002Fparticipation-and-membership-faq\u002F",{"id":83,"text":84,"children":85},"cra","Cyber Resilience Act",[86,89,93,96],{"text":87,"href":88},"About CRA","\u002Fcra\u002Fabout",{"text":90,"href":91,"external":92},"CRA FAQ","https:\u002F\u002Fcra.orcwg.org\u002F",true,{"text":94,"href":95},"CRA Resources","\u002Fcra\u002Fresources",{"text":97,"href":98,"external":92},"CRA Hub on GitHub","https:\u002F\u002Fgithub.com\u002Forcwg\u002Fcra-hub",{"text":100,"children":101},"Resources",[102,105,108,111,114,117,120],{"text":103,"href":104},"Events","\u002Fevents\u002F",{"text":106,"href":107},"Community Calendar","\u002Fresources\u002Fcalendar\u002F",{"text":109,"href":110},"Blog","\u002Fblog\u002F",{"text":112,"href":113},"Videos","\u002Fresources\u002Fvideos\u002F",{"text":115,"href":116},"Learning Hub","\u002Ftraining\u002F",{"text":118,"href":119},"Marketing Resources","\u002Fresources\u002Fmarketing-resources\u002F",{"text":121,"href":122,"external":92},"ORC Store","https:\u002F\u002Feclipse-foundation.store\u002Fcollections\u002Fopen-regulatory-compliance-orc",{},"data\u002Fnavigation","XYDVypNX67n8V4VQI_JTrw0cI16uV5jtctVXjN-DeKo",{"id":127,"backToTopText":128,"copyright":129,"extension":10,"manageCookiesText":130,"meta":131,"sections":132,"socialsHeading":185,"stem":186,"__hash__":187},"footer\u002Fdata\u002Ffooter.yml","Back to the top","Copyright © Eclipse Foundation AISBL. All Rights Reserved.","Manage Cookies",{},[133,150,169],{"id":134,"heading":135,"links":136},"footer-eclipse-foundation","Eclipse Foundation",[137,139,142,145,147],{"text":53,"href":138},"https:\u002F\u002Fwww.eclipse.org\u002Forg\u002F",{"text":140,"href":141},"Projects","https:\u002F\u002Fprojects.eclipse.org\u002F",{"text":143,"href":144},"Collaborations","https:\u002F\u002Fwww.eclipse.org\u002Fcollaborations\u002F",{"text":71,"href":146},"https:\u002F\u002Fwww.eclipse.org\u002Fmembership\u002F",{"text":148,"href":149},"Sponsor","https:\u002F\u002Fwww.eclipse.org\u002Fsponsor\u002F",{"id":151,"heading":152,"showManageCookies":92,"links":153},"footer-legal","Legal",[154,157,160,163,166],{"text":155,"href":156},"Privacy Policy","https:\u002F\u002Fwww.eclipse.org\u002Flegal\u002Fprivacy\u002F",{"text":158,"href":159},"Terms of Use","https:\u002F\u002Fwww.eclipse.org\u002Flegal\u002Fterms-of-use\u002F",{"text":161,"href":162},"Compliance","https:\u002F\u002Fwww.eclipse.org\u002Flegal\u002Fcompliance\u002F",{"text":164,"href":165},"Code of Conduct","https:\u002F\u002Fwww.eclipse.org\u002Forg\u002Fdocuments\u002FCommunity_Code_of_Conduct.php",{"text":167,"href":168},"Legal Resources","https:\u002F\u002Fwww.eclipse.org\u002Flegal\u002F",{"id":170,"heading":171,"links":172},"footer-more","More",[173,176,179,182],{"text":174,"href":175},"Report a Vulnerability","https:\u002F\u002Fwww.eclipse.org\u002Fsecurity\u002F",{"text":177,"href":178},"Service Status","https:\u002F\u002Fstatus.eclipse.org\u002F",{"text":180,"href":181},"Contact Us","https:\u002F\u002Fwww.eclipse.org\u002Forg\u002Ffoundation\u002Fcontact.php",{"text":183,"href":184},"Support","https:\u002F\u002Fwww.eclipse.org\u002Fprojects\u002Fsupport\u002F","Follow Us:","data\u002Ffooter","C-lpCHl9crwF3iQyRSh8y5g9ez5YgF4pi8aTv4pFLBM",{"id":189,"title":190,"aliases":191,"author":192,"body":193,"breadcrumbTitle":191,"breadcrumbs":191,"date":462,"description":191,"extension":463,"featuredFooter":191,"keywords":191,"meta":464,"navigation":92,"path":465,"redirectUrl":191,"seo":466,"seoTitle":191,"socialImage":191,"stem":467,"summary":191,"typography":191,"visibility":191,"width":191,"__hash__":468},"blog\u002Fblog\u002Forc-monthly-aug2025.md","ORC Monthly: Recent press release, white paper on Open Source Stewards and the CRA and Code & Compliance",null,"Juan Rico",{"type":194,"value":195,"toc":452},"minimark",[196,200,214,226,231,301,305,316,320,350,354,410,414,417,426,430],[197,198,199],"p",{},"As summer winds down, ORC is gearing up for a busy event season. From global security summits to community-driven gatherings, this fall will be packed with opportunities to connect, share knowledge, and advance the conversation around the Cyber Resilience Act and upcoming regulations.",[197,201,202,203,213],{},"One event you won’t want to miss: ",[204,205,209],"a",{"href":206,"rel":207},"https:\u002F\u002Fwww.eclipse-foundation.events\u002Fevent\u002FCode-and-compliance-Community-Day-2025\u002Fsummary",[208],"nofollow",[210,211,212],"strong",{},"Code & Compliance Community Day"," taking place in Brussels, 22–23 October. This event will bring together developers, compliance experts, and regulators to share knowledge and advance collaboration around the CRA and open source compliance. We hope to see many of you there.",[197,215,216,220,223],{},[217,218,219],"em",{},"Shanda Giacomoni",[221,222],"br",{},[217,224,225],{},"Senior Marketing Manager, ORC",[227,228,230],"h2",{"id":229},"whats-new","What’s New",[232,233,234,244,260,267,281],"ul",{},[235,236,237,238,243],"li",{},"ORC’s ",[204,239,242],{"href":240,"rel":241},"https:\u002F\u002Fnewsroom.eclipse.org\u002Fnews\u002Fannouncements\u002Fopen-regulatory-compliance-working-group-welcomes-new-members-and-provides-first",[208],"recent press release"," highlighting our growth and achievements has generated meaningful industry attention, reflecting the timely interest in the Cyber Resilience Act (CRA) and the broader push for open regulatory compliance. See the cover below.",[235,245,246,247,254,255],{},"Work continues on the ",[204,248,251],{"href":249,"rel":250},"https:\u002F\u002Fgithub.com\u002Forcwg\u002Forcwg\u002Fblob\u002Fmain\u002Fcyber-resilience-sig\u002Fdeliverables.md#35-white-paper-open-source-software-stewards-and-cra",[208],[210,252,253],{},"Open Source Stewards and the CRA"," white paper, with valuable input coming from across the working group. This resource will outline the obligations, restrictions, and potential penalties that Stewards may face under the Cyber Resilience Act. Community members can learn more and contribute to the discussion on ",[204,256,259],{"href":257,"rel":258},"https:\u002F\u002Fgithub.com\u002Forcwg\u002Forcwg\u002Fpull\u002F150",[208],"GitHub",[235,261,262,263,266],{},"The open source community, and ORC members in particular, have reported and commented on the initial draft of the ",[210,264,265],{},"Vulnerability Handling CEN\u002FCENELEC"," work, which currently equates open source with a supplier. We will closely monitor the evolution of this work, as it could have a major impact on the community.",[235,268,269,270,275,276,280],{},"We’re excited to announce the launch of a dedicated ",[204,271,274],{"href":272,"rel":273},"https:\u002F\u002Forcwg.org\u002Fblog\u002F",[208],"blog section on orcwg.org",". We’d love to highlight voices from across the community. If you’re interested in contributing a post, please ",[204,277,279],{"href":278},"mailto:news@eclipse.org","reach out to our team"," to discuss your ideas.",[235,282,283,284,287,288,291,292,295,296],{},"Our popular ",[210,285,286],{},"CRA Mondays"," series resumes on ",[210,289,290],{},"September 1"," with the session ",[217,293,294],{},"Unlocking Software Supply Chain Security: Updates from Ecma TC54 and OWASP",". ",[204,297,300],{"href":298,"rel":299},"https:\u002F\u002Fcalendar.google.com\u002Fcalendar\u002Fevent?action=TEMPLATE&tmeid=NGo1YWhzZ3YydG1rb2dmZzVrcGcxZnEzdGpfMjAyNTA5MDFUMTUwMDAwWiBjXzdkYjhlM2YxM2M0ZmFjOTg0MTAzOTE4YTk3YzcwNGJiMWQ2MTlkYTBmZGI2NmQzM2YxNzQ3ODQ5YjYwMjBhZWFAZw&tmsrc=c_7db8e3f13c4fac984103918a97c704bb1d619da0fdb66d33f1747849b6020aea%40group.calendar.google.com",[208],"Add it to your calendar.",[227,302,304],{"id":303},"overheard","Overheard",[197,306,307],{},[204,308,311],{"href":309,"rel":310},"https:\u002F\u002Fwww.linkedin.com\u002Fposts\u002Frozhukov_asw-cra-osps-activity-7366121452388921346-QYX3?utm_source=share&utm_medium=member_desktop&rcm=ACoAAAYPUqEBp0WKWGph_vgaFZs7BihQcqkB-_o",[208],[312,313],"img",{"alt":314,"src":315},"Roman Zhukov's LinkedIn post about his recent podcast appearance","\u002Fblog\u002Forc-monthly-aug2025\u002Fimages\u002Faug-overheard.webp",[227,317,319],{"id":318},"in-the-news","In the news",[232,321,322,329,336,343],{},[235,323,324],{},[204,325,328],{"href":326,"rel":327},"https:\u002F\u002Fwww.heise.de\u002Fnews\u002FCyber-Resilience-Act-Initiative-der-Eclipse-Foundation-hilft-bei-Compliance-10525852.html",[208],"Cyber Resilience Act: Eclipse Foundation initiative helps with compliance",[235,330,331],{},[204,332,335],{"href":333,"rel":334},"https:\u002F\u002Fdevops.com\u002Feclipse-foundation-publishes-toolkit-to-simplify-cra-compliance\u002F",[208],"Eclipse Foundation Publishes Toolkit to Simplify CRA Compliance",[235,337,338],{},[204,339,342],{"href":340,"rel":341},"https:\u002F\u002Fvmblog.com\u002Farchive\u002F2025\u002F08\u002F15\u002Fthabang-mashologu-on-open-regulatory-compliance-orc-momentum-and-the-launch-of-the-occtet-project-vmblog-qa.aspx",[208],"Thabang Mashologu on Open Regulatory Compliance (ORC) Momentum and the Launch of the OCCTET Project",[235,344,345],{},[204,346,349],{"href":347,"rel":348},"https:\u002F\u002Ftechstrong.tv\u002Fvideos\u002Finterviews\u002Fempowering-open-source-insights-from-eclipse-foundations-thabang-mashologu",[208],"Empowering Open Source: Insights from Eclipse Foundation’s Thabang Mashologu",[227,351,353],{"id":352},"upcoming-events","Upcoming Events",[232,355,356,364,372,380,388,396,404],{},[235,357,358,363],{},[204,359,362],{"href":360,"rel":361},"https:\u002F\u002Fcomply.land\u002F",[208],"Comply.Land"," | 11 September 2025 - 12 September 2025",[235,365,366,371],{},[204,367,370],{"href":368,"rel":369},"https:\u002F\u002Fwww.bitkom.org\u002FForum-Open-Source-2025",[208],"Bitkom Open Source Forum 2025"," | 18 September 2025",[235,373,374,379],{},[204,375,378],{"href":376,"rel":377},"https:\u002F\u002Fwww.thethingsconference.com\u002F",[208],"The Things Conference"," | 23 - 24 September 2025",[235,381,382,387],{},[204,383,386],{"href":384,"rel":385},"https:\u002F\u002Fnsss.se\u002Fy2025\u002F",[208],"Nordic Software Security Summit"," | 1-3 October 2025",[235,389,390,395],{},[204,391,394],{"href":392,"rel":393},"https:\u002F\u002Fwww.etsi.org\u002Fevents\u002Fupcoming-events\u002F2481-etsi-security-conference-oct2025",[208],"ETSI Security Conference 2025"," | 6-9 October 2025",[235,397,398,403],{},[204,399,402],{"href":400,"rel":401},"https:\u002F\u002Fwww.enisa.europa.eu\u002Fevents\u002Fcra-making-the-eu-market-resilient",[208],"CRA – Making the EU Market Resilient"," | 8 October 2025",[235,405,406,409],{},[204,407,212],{"href":206,"rel":408},[208]," | 22-23 October 2025",[227,411,413],{"id":412},"welcome-orc-members","Welcome ORC Members",[197,415,416],{},"The following members joined in August 2025:",[232,418,419],{},[235,420,421],{},[204,422,425],{"href":423,"rel":424},"https:\u002F\u002Fwww.niis.org\u002F",[208],"Nordic Institute for Interoperability Solutions (NIIS)",[227,427,429],{"id":428},"how-to-participate","How to Participate",[232,431,432,438,445],{},[235,433,434],{},[204,435,437],{"href":98,"rel":436},[208],"Learn",[235,439,440],{},[204,441,444],{"href":442,"rel":443},"https:\u002F\u002Fgithub.com\u002Forcwg",[208],"Contribute",[235,446,447],{},[204,448,451],{"href":449,"rel":450},"https:\u002F\u002Forcwg.org\u002Fmembership\u002F",[208],"Join the Working Group",{"title":453,"searchDepth":454,"depth":454,"links":455},"",2,[456,457,458,459,460,461],{"id":229,"depth":454,"text":230},{"id":303,"depth":454,"text":304},{"id":318,"depth":454,"text":319},{"id":352,"depth":454,"text":353},{"id":412,"depth":454,"text":413},{"id":428,"depth":454,"text":429},"2025-08-27","md",{},"\u002Fblog\u002Forc-monthly-aug2025",{"title":190},"blog\u002Forc-monthly-aug2025","LLmnhXTpXdx24Q71nCBabNDdIyRW4aLbU_lNod3IXAQ",[470],{"path":471,"visibility":191},"\u002Fblog",false,[474,477],{"path":475,"text":476},"\u002F","ORC",{"path":471,"text":109},1792684543441]