[{"data":1,"prerenderedAt":441},["ShallowReactive",2],{"site:settings":3,"site:navigation":49,"site:footer":126,"page:\u002Fblog\u002Forc-monthly-mar2026":188,"sections:\u002Fblog\u002Forc-monthly-mar2026":432,"feed:\u002Fblog\u002Forc-monthly-mar2026":435,"breadcrumbs:\u002Fblog\u002Forc-monthly-mar2026":436},{"id":4,"title":5,"callForAction":6,"description":9,"extension":10,"featuredContentPublishTarget":11,"keywords":12,"logo":18,"logoWidth":19,"meta":20,"search":21,"seoTitleSuffix":25,"skipLinkText":26,"socialImage":27,"socials":30,"stem":47,"__hash__":48},"settings\u002Fdata\u002Fsettings.yml","Open Regulatory Compliance Working Group",{"text":7,"href":8},"Get involved","\u002Fparticipate\u002F","The open source community is collaborating to establish common specifications for secure software development based on open source best practices.","yml","orc",[13,14,15,16,17],"regulatory compliance","cybersecurity processes","royalty-free patent licence","open source community collaboration","Eclipse Foundation Specification Process","\u002Fimages\u002Forc-logo.png",120,{},{"label":22,"placeholder":23,"menuLabel":24},"Search","Search the site…","Menu"," | Open Regulatory Compliance Working Group","Skip to main content",{"backgroundImage":28,"eyebrow":29},"\u002Fimages\u002Fog\u002Fbackground.jpg","orcwg.org",[31,35,39,43],{"name":32,"icon":33,"url":34},"LinkedIn","fa6-brands:linkedin-in","https:\u002F\u002Fwww.linkedin.com\u002Fshowcase\u002Fopen-regulatory-compliance\u002F",{"name":36,"icon":37,"url":38},"YouTube","fa6-brands:youtube","https:\u002F\u002Fwww.youtube.com\u002F@ORCWG",{"name":40,"icon":41,"url":42},"Bluesky","fa6-brands:bluesky","https:\u002F\u002Fbsky.app\u002Fprofile\u002Forcwg.org",{"name":44,"icon":45,"url":46},"Mastodon","fa6-brands:mastodon","https:\u002F\u002Ffosstodon.org\u002F@orcwg","data\u002Fsettings","bxtnzYEG4TQ27x8O_VKQIF-gc2dr-DNwF9_OpAZy3LA",{"id":50,"extension":10,"main":51,"meta":123,"stem":124,"__hash__":125},"navigation\u002Fdata\u002Fnavigation.yml",[52,70,82,99],{"text":53,"children":54},"About",[55,58,61,64,67],{"text":56,"href":57},"ORC Working Group","\u002Fabout\u002F",{"text":59,"href":60},"Cyber Resilience SIG","\u002Fspecial-interest-groups\u002Fcyber-resilience\u002F",{"text":62,"href":63},"AI Policy & Compliance SIG","\u002Fspecial-interest-groups\u002Fai-policy-and-compliance\u002F",{"text":65,"href":66},"Steering Committee","\u002Fcommittees\u002Fsteering-committee\u002F",{"text":68,"href":69},"Meeting Minutes","\u002Fcommittees\u002Fminutes\u002F",{"text":71,"children":72},"Membership",[73,76,79],{"text":74,"href":75},"Our Members","\u002Fmembership\u002F",{"text":77,"href":78},"Become a Member","\u002Fmembership\u002Fbecome-a-member\u002F",{"text":80,"href":81},"Participation and Membership FAQ","\u002Fabout\u002Fparticipation-and-membership-faq\u002F",{"id":83,"text":84,"children":85},"cra","Cyber Resilience Act",[86,89,93,96],{"text":87,"href":88},"About CRA","\u002Fcra\u002Fabout",{"text":90,"href":91,"external":92},"CRA FAQ","https:\u002F\u002Fcra.orcwg.org\u002F",true,{"text":94,"href":95},"CRA Resources","\u002Fcra\u002Fresources",{"text":97,"href":98,"external":92},"CRA Hub on GitHub","https:\u002F\u002Fgithub.com\u002Forcwg\u002Fcra-hub",{"text":100,"children":101},"Resources",[102,105,108,111,114,117,120],{"text":103,"href":104},"Events","\u002Fevents\u002F",{"text":106,"href":107},"Community Calendar","\u002Fresources\u002Fcalendar\u002F",{"text":109,"href":110},"Blog","\u002Fblog\u002F",{"text":112,"href":113},"Videos","\u002Fresources\u002Fvideos\u002F",{"text":115,"href":116},"Learning Hub","\u002Ftraining\u002F",{"text":118,"href":119},"Marketing Resources","\u002Fresources\u002Fmarketing-resources\u002F",{"text":121,"href":122,"external":92},"ORC Store","https:\u002F\u002Feclipse-foundation.store\u002Fcollections\u002Fopen-regulatory-compliance-orc",{},"data\u002Fnavigation","XYDVypNX67n8V4VQI_JTrw0cI16uV5jtctVXjN-DeKo",{"id":127,"backToTopText":128,"copyright":129,"extension":10,"manageCookiesText":130,"meta":131,"sections":132,"socialsHeading":185,"stem":186,"__hash__":187},"footer\u002Fdata\u002Ffooter.yml","Back to the top","Copyright © Eclipse Foundation AISBL. All Rights Reserved.","Manage Cookies",{},[133,150,169],{"id":134,"heading":135,"links":136},"footer-eclipse-foundation","Eclipse Foundation",[137,139,142,145,147],{"text":53,"href":138},"https:\u002F\u002Fwww.eclipse.org\u002Forg\u002F",{"text":140,"href":141},"Projects","https:\u002F\u002Fprojects.eclipse.org\u002F",{"text":143,"href":144},"Collaborations","https:\u002F\u002Fwww.eclipse.org\u002Fcollaborations\u002F",{"text":71,"href":146},"https:\u002F\u002Fwww.eclipse.org\u002Fmembership\u002F",{"text":148,"href":149},"Sponsor","https:\u002F\u002Fwww.eclipse.org\u002Fsponsor\u002F",{"id":151,"heading":152,"showManageCookies":92,"links":153},"footer-legal","Legal",[154,157,160,163,166],{"text":155,"href":156},"Privacy Policy","https:\u002F\u002Fwww.eclipse.org\u002Flegal\u002Fprivacy\u002F",{"text":158,"href":159},"Terms of Use","https:\u002F\u002Fwww.eclipse.org\u002Flegal\u002Fterms-of-use\u002F",{"text":161,"href":162},"Compliance","https:\u002F\u002Fwww.eclipse.org\u002Flegal\u002Fcompliance\u002F",{"text":164,"href":165},"Code of Conduct","https:\u002F\u002Fwww.eclipse.org\u002Forg\u002Fdocuments\u002FCommunity_Code_of_Conduct.php",{"text":167,"href":168},"Legal Resources","https:\u002F\u002Fwww.eclipse.org\u002Flegal\u002F",{"id":170,"heading":171,"links":172},"footer-more","More",[173,176,179,182],{"text":174,"href":175},"Report a Vulnerability","https:\u002F\u002Fwww.eclipse.org\u002Fsecurity\u002F",{"text":177,"href":178},"Service Status","https:\u002F\u002Fstatus.eclipse.org\u002F",{"text":180,"href":181},"Contact Us","https:\u002F\u002Fwww.eclipse.org\u002Forg\u002Ffoundation\u002Fcontact.php",{"text":183,"href":184},"Support","https:\u002F\u002Fwww.eclipse.org\u002Fprojects\u002Fsupport\u002F","Follow Us:","data\u002Ffooter","C-lpCHl9crwF3iQyRSh8y5g9ez5YgF4pi8aTv4pFLBM",{"id":189,"title":190,"aliases":191,"author":192,"body":193,"breadcrumbTitle":191,"breadcrumbs":191,"date":425,"description":191,"extension":426,"featuredFooter":191,"keywords":191,"meta":427,"navigation":92,"path":428,"redirectUrl":191,"seo":429,"seoTitle":191,"socialImage":191,"stem":430,"summary":191,"typography":191,"visibility":191,"width":191,"__hash__":431},"blog\u002Fblog\u002Forc-monthly-mar2026.md","ORC Monthly: Countdown to OCX",null,"Juan Rico",{"type":194,"value":195,"toc":415},"minimark",[196,214,227,232,289,293,316,320,331,335,369,373,389,393],[197,198,199,200,207,208,213],"p",{},"With OCX 2026 just weeks away, we’re looking forward to bringing the ORC community together in Brussels for an important milestone, the first-ever ",[201,202,206],"a",{"href":203,"rel":204},"https:\u002F\u002Fwww.ocxconf.org\u002Fevent\u002F2026\u002Fopen-community-for-compliance",[205],"nofollow","Open Community for Compliance"," track at OCX. This dedicated track reflects the growing importance of our work, offering a space for developers, policymakers, and industry leaders to exchange practical insights on topics like the Cyber Resilience Act, secure development, and open source compliance. If you’ve been following or contributing to ORC, this is a unique opportunity to connect in person and help shape what comes next. If you haven’t yet ",[201,209,212],{"href":210,"rel":211},"https:\u002F\u002Fwww.ocxconf.org\u002Fevent\u002F2026\u002Fregister",[205],"registered",", we strongly encourage you to do so and be part of our first time at OCX.",[197,215,216,220,221,224],{},[217,218,219],"em",{},"Timo Perala and Dirk-Willem van Gulik"," ",[222,223],"br",{},[217,225,226],{},"ORC co-chairs",[228,229,231],"h2",{"id":230},"whats-new","What’s New",[233,234,235,255,277],"ul",{},[236,237,238,220,242,220,244,249,250,254],"li",{},[239,240,241],"strong",{},"CRA Training Session at OCX 2026",[222,243],{},[201,245,248],{"href":246,"rel":247},"https:\u002F\u002Fwww.ocxconf.org\u002Fevent\u002F2026\u002Fworkshops",[205],"Are you ready for the CRA? Learn how the EU regulation will affect open source"," in this hands-on workshop designed to help you understand the practical implications of the Cyber Resilience Act. Included with your OCX registration, this session is a great opportunity to build readiness and ask questions directly with experts. ",[201,251,253],{"href":246,"rel":252},[205],"Learn more and plan your participation",".",[236,256,257,220,260,262,263,268,269,272,273,254],{},[239,258,259],{},"Call for Speakers: CRA Mondays",[222,261],{},"\nWe’re looking for new speakers to join our upcoming ",[201,264,267],{"href":265,"rel":266},"https:\u002F\u002Fgithub.com\u002Forcwg\u002Forcwg\u002Ftree\u002Fmain\u002Fevents\u002Fcra-mondays",[205],"CRA Mondays sessions",". This is a great opportunity to share your experience, discuss challenges, showcase tools, or explore ",[239,270,271],{},"topics related to the Cyber Resilience Act"," with a highly engaged ORC community. The series has seen strong momentum over the past few months, and we’re excited to continue building a diverse lineup of talks. If you’re interested in presenting or would like to recommend a speaker, please ",[201,274,276],{"href":275},"mailto:shanda.giacomoni@eclipse-foundation.org","reach out to Shanda",[236,278,279,220,282,284,285,288],{},[239,280,281],{},"ORC at Embedded World 2026",[222,283],{},"\nORC returned to Embedded World for a second year, with noticeably increased awareness of the Cyber Resilience Act across the embedded systems community. We had many valuable conversations with organisations looking to better understand CRA requirements, and shared community-driven resources such as the ",[201,286,90],{"href":91,"rel":287},[205]," to support their journey.",[228,290,292],{"id":291},"blog-you-might-have-missed","Blog you might have missed",[233,294,295,302,309],{},[236,296,297],{},[201,298,301],{"href":299,"rel":300},"https:\u002F\u002Fwww.forrester.com\u002Fblogs\u002Fregulators-are-moving-on-sboms-but-is-your-compliance-program-keeping-pace\u002F%20",[205],"Regulators Are Moving On SBOMs — But Is Your Compliance Program Keeping Pace?",[236,303,304],{},[201,305,308],{"href":306,"rel":307},"https:\u002F\u002Forcwg.org\u002Fblog\u002Fcra-draft-guidance\u002F",[205],"Coordinating Open Source Feedback on the CRA Draft Guidance",[236,310,311],{},[201,312,315],{"href":313,"rel":314},"https:\u002F\u002Forcwg.org\u002Fblog\u002Fattestations-update-mar2026\u002F",[205],"Attestations in Progress",[228,317,319],{"id":318},"overheard","Overheard",[197,321,322],{},[201,323,326],{"href":324,"rel":325},"https:\u002F\u002Fwww.linkedin.com\u002Ffeed\u002Fupdate\u002Furn:li:activity:7439709694128041984\u002F",[205],[327,328],"img",{"alt":329,"src":330},"FreeBSD Foundation shares their first monthly report for our Cyber Resilience Act Readiness project on LinkedIn","\u002Fblog\u002Forc-monthly-mar2026\u002Fimages\u002Fmar-overheard.png",[228,332,334],{"id":333},"upcoming-events","Upcoming Events",[233,336,337,345,353,361],{},[236,338,339,344],{},[201,340,343],{"href":341,"rel":342},"https:\u002F\u002Fnsss.se\u002F",[205],"Nordic Software Security Summit"," | 8-10 April 2026",[236,346,347,352],{},[201,348,351],{"href":349,"rel":350},"https:\u002F\u002Fwww.ocxconf.org\u002Fevent\u002F2026",[205],"Open Community Experience (OCX) 2026"," | 21-23 April 2026",[236,354,355,360],{},[201,356,359],{"href":357,"rel":358},"https:\u002F\u002Ffoss-north.se\u002F2026\u002F",[205],"foss-north 2026"," | 27-28 April 2026",[236,362,363,368],{},[201,364,367],{"href":365,"rel":366},"https:\u002F\u002Fgithub.com\u002Forcwg\u002Forcwg\u002Ftree\u002Fmain\u002Fevents\u002Fcra-mondays#may-11-using-the-cra-to-understand-systems-in-practice",[205],"CRA Monday: Using the CRA to Understand Systems in Practice"," | 11 May 2026",[228,370,372],{"id":371},"recent-talks-events","Recent Talks & Events",[233,374,375,382],{},[236,376,377],{},[201,378,381],{"href":379,"rel":380},"https:\u002F\u002Fyoutu.be\u002Fns9RBhEsz_U?si=Xdt3QwszlbgBM_ZU",[205],"Lessons from Log4Shell: building a CRA-ready Log4j",[236,383,384],{},[201,385,388],{"href":386,"rel":387},"https:\u002F\u002Fyoutu.be\u002F5B6VXZwZa-c?si=oGEzTc3SZf7SHBXH",[205],"Software Hash Identifier introduction and applications to in-development standards",[228,390,392],{"id":391},"how-to-participate","How to Participate",[233,394,395,401,408],{},[236,396,397],{},[201,398,400],{"href":98,"rel":399},[205],"Learn",[236,402,403],{},[201,404,407],{"href":405,"rel":406},"https:\u002F\u002Fgithub.com\u002Forcwg",[205],"Contribute",[236,409,410],{},[201,411,414],{"href":412,"rel":413},"https:\u002F\u002Forcwg.org\u002Fmembership\u002Fbecome-a-member\u002F",[205],"Join the Working Group",{"title":416,"searchDepth":417,"depth":417,"links":418},"",2,[419,420,421,422,423,424],{"id":230,"depth":417,"text":231},{"id":291,"depth":417,"text":292},{"id":318,"depth":417,"text":319},{"id":333,"depth":417,"text":334},{"id":371,"depth":417,"text":372},{"id":391,"depth":417,"text":392},"2026-03-31","md",{},"\u002Fblog\u002Forc-monthly-mar2026",{"title":190},"blog\u002Forc-monthly-mar2026","_BptnEXcPy1CS6MqUWgWdIBsvNSnoaZgtDG8Ewquu_Q",[433],{"path":434,"visibility":191},"\u002Fblog",false,[437,440],{"path":438,"text":439},"\u002F","ORC",{"path":434,"text":109},1792684541651]