[{"data":1,"prerenderedAt":528},["ShallowReactive",2],{"site:settings":3,"site:navigation":49,"site:footer":126,"page:\u002Fblog\u002Forc-monthly-sept2026":188,"sections:\u002Fblog\u002Forc-monthly-sept2026":519,"feed:\u002Fblog\u002Forc-monthly-sept2026":522,"breadcrumbs:\u002Fblog\u002Forc-monthly-sept2026":523},{"id":4,"title":5,"callForAction":6,"description":9,"extension":10,"featuredContentPublishTarget":11,"keywords":12,"logo":18,"logoWidth":19,"meta":20,"search":21,"seoTitleSuffix":25,"skipLinkText":26,"socialImage":27,"socials":30,"stem":47,"__hash__":48},"settings\u002Fdata\u002Fsettings.yml","Open Regulatory Compliance Working Group",{"text":7,"href":8},"Get involved","\u002Fparticipate\u002F","The open source community is collaborating to establish common specifications for secure software development based on open source best practices.","yml","orc",[13,14,15,16,17],"regulatory compliance","cybersecurity processes","royalty-free patent licence","open source community collaboration","Eclipse Foundation Specification Process","\u002Fimages\u002Forc-logo.png",120,{},{"label":22,"placeholder":23,"menuLabel":24},"Search","Search the site…","Menu"," | Open Regulatory Compliance Working Group","Skip to main content",{"backgroundImage":28,"eyebrow":29},"\u002Fimages\u002Fog\u002Fbackground.jpg","orcwg.org",[31,35,39,43],{"name":32,"icon":33,"url":34},"LinkedIn","fa6-brands:linkedin-in","https:\u002F\u002Fwww.linkedin.com\u002Fshowcase\u002Fopen-regulatory-compliance\u002F",{"name":36,"icon":37,"url":38},"YouTube","fa6-brands:youtube","https:\u002F\u002Fwww.youtube.com\u002F@ORCWG",{"name":40,"icon":41,"url":42},"Bluesky","fa6-brands:bluesky","https:\u002F\u002Fbsky.app\u002Fprofile\u002Forcwg.org",{"name":44,"icon":45,"url":46},"Mastodon","fa6-brands:mastodon","https:\u002F\u002Ffosstodon.org\u002F@orcwg","data\u002Fsettings","bxtnzYEG4TQ27x8O_VKQIF-gc2dr-DNwF9_OpAZy3LA",{"id":50,"extension":10,"main":51,"meta":123,"stem":124,"__hash__":125},"navigation\u002Fdata\u002Fnavigation.yml",[52,70,82,99],{"text":53,"children":54},"About",[55,58,61,64,67],{"text":56,"href":57},"ORC Working Group","\u002Fabout\u002F",{"text":59,"href":60},"Cyber Resilience SIG","\u002Fspecial-interest-groups\u002Fcyber-resilience\u002F",{"text":62,"href":63},"AI Policy & Compliance SIG","\u002Fspecial-interest-groups\u002Fai-policy-and-compliance\u002F",{"text":65,"href":66},"Steering Committee","\u002Fcommittees\u002Fsteering-committee\u002F",{"text":68,"href":69},"Meeting Minutes","\u002Fcommittees\u002Fminutes\u002F",{"text":71,"children":72},"Membership",[73,76,79],{"text":74,"href":75},"Our Members","\u002Fmembership\u002F",{"text":77,"href":78},"Become a Member","\u002Fmembership\u002Fbecome-a-member\u002F",{"text":80,"href":81},"Participation and Membership FAQ","\u002Fabout\u002Fparticipation-and-membership-faq\u002F",{"id":83,"text":84,"children":85},"cra","Cyber Resilience Act",[86,89,93,96],{"text":87,"href":88},"About CRA","\u002Fcra\u002Fabout",{"text":90,"href":91,"external":92},"CRA FAQ","https:\u002F\u002Fcra.orcwg.org\u002F",true,{"text":94,"href":95},"CRA Resources","\u002Fcra\u002Fresources",{"text":97,"href":98,"external":92},"CRA Hub on GitHub","https:\u002F\u002Fgithub.com\u002Forcwg\u002Fcra-hub",{"text":100,"children":101},"Resources",[102,105,108,111,114,117,120],{"text":103,"href":104},"Events","\u002Fevents\u002F",{"text":106,"href":107},"Community Calendar","\u002Fresources\u002Fcalendar\u002F",{"text":109,"href":110},"Blog","\u002Fblog\u002F",{"text":112,"href":113},"Videos","\u002Fresources\u002Fvideos\u002F",{"text":115,"href":116},"Learning Hub","\u002Ftraining\u002F",{"text":118,"href":119},"Marketing Resources","\u002Fresources\u002Fmarketing-resources\u002F",{"text":121,"href":122,"external":92},"ORC Store","https:\u002F\u002Feclipse-foundation.store\u002Fcollections\u002Fopen-regulatory-compliance-orc",{},"data\u002Fnavigation","XYDVypNX67n8V4VQI_JTrw0cI16uV5jtctVXjN-DeKo",{"id":127,"backToTopText":128,"copyright":129,"extension":10,"manageCookiesText":130,"meta":131,"sections":132,"socialsHeading":185,"stem":186,"__hash__":187},"footer\u002Fdata\u002Ffooter.yml","Back to the top","Copyright © Eclipse Foundation AISBL. All Rights Reserved.","Manage Cookies",{},[133,150,169],{"id":134,"heading":135,"links":136},"footer-eclipse-foundation","Eclipse Foundation",[137,139,142,145,147],{"text":53,"href":138},"https:\u002F\u002Fwww.eclipse.org\u002Forg\u002F",{"text":140,"href":141},"Projects","https:\u002F\u002Fprojects.eclipse.org\u002F",{"text":143,"href":144},"Collaborations","https:\u002F\u002Fwww.eclipse.org\u002Fcollaborations\u002F",{"text":71,"href":146},"https:\u002F\u002Fwww.eclipse.org\u002Fmembership\u002F",{"text":148,"href":149},"Sponsor","https:\u002F\u002Fwww.eclipse.org\u002Fsponsor\u002F",{"id":151,"heading":152,"showManageCookies":92,"links":153},"footer-legal","Legal",[154,157,160,163,166],{"text":155,"href":156},"Privacy Policy","https:\u002F\u002Fwww.eclipse.org\u002Flegal\u002Fprivacy\u002F",{"text":158,"href":159},"Terms of Use","https:\u002F\u002Fwww.eclipse.org\u002Flegal\u002Fterms-of-use\u002F",{"text":161,"href":162},"Compliance","https:\u002F\u002Fwww.eclipse.org\u002Flegal\u002Fcompliance\u002F",{"text":164,"href":165},"Code of Conduct","https:\u002F\u002Fwww.eclipse.org\u002Forg\u002Fdocuments\u002FCommunity_Code_of_Conduct.php",{"text":167,"href":168},"Legal Resources","https:\u002F\u002Fwww.eclipse.org\u002Flegal\u002F",{"id":170,"heading":171,"links":172},"footer-more","More",[173,176,179,182],{"text":174,"href":175},"Report a Vulnerability","https:\u002F\u002Fwww.eclipse.org\u002Fsecurity\u002F",{"text":177,"href":178},"Service Status","https:\u002F\u002Fstatus.eclipse.org\u002F",{"text":180,"href":181},"Contact Us","https:\u002F\u002Fwww.eclipse.org\u002Forg\u002Ffoundation\u002Fcontact.php",{"text":183,"href":184},"Support","https:\u002F\u002Fwww.eclipse.org\u002Fprojects\u002Fsupport\u002F","Follow Us:","data\u002Ffooter","C-lpCHl9crwF3iQyRSh8y5g9ez5YgF4pi8aTv4pFLBM",{"id":189,"title":190,"aliases":191,"author":192,"body":193,"breadcrumbTitle":191,"breadcrumbs":191,"date":510,"description":191,"extension":511,"featuredFooter":191,"keywords":191,"meta":512,"navigation":92,"path":513,"redirectUrl":191,"seo":514,"seoTitle":191,"socialImage":515,"stem":517,"summary":191,"typography":191,"visibility":191,"width":191,"__hash__":518},"blog\u002Fblog\u002Forc-monthly-sept2026.md","ORC Monthly: CRA Reporting Begins, AI SIG Takes Shape, and Learning Hub Grows",null,"Shanda Giacomoni",{"type":194,"value":195,"toc":501},"minimark",[196,212,231,238,322,328,331,349,356,362,385,391,440,449,455],[197,198,199,200,205,206,211],"p",{},"11 September marked the first Cyber Resilience Act (CRA) deadline and an important milestone for the ORC community’s work. Months of work went into preparing for it, from testing the Single Reporting Platform to building the ",[201,202,90],"a",{"href":91,"rel":203},[204],"nofollow"," and the ",[201,207,210],{"href":208,"rel":209},"https:\u002F\u002Forcwg.org\u002Ftraining\u002F",[204],"ORC Learning Hub",". But there’s still a lot to do before the remaining CRA obligations apply in 2027.",[197,213,214,215,220,221,225,226],{},"That’s why we hope to see you at ",[201,216,219],{"href":217,"rel":218},"https:\u002F\u002Fcodeandcompliance.orcwg.org\u002Fcode-compliance-2026\u002F",[204],"Code & Compliance"," on 27 October at Maison de la Poste in Brussels. Across four blocks, the day moves from policy objectives to the practical work of complying with the CRA and the AI Act. ORC members save 50 percent with the code ",[222,223,224],"strong",{},"ORCMEMBER50",". ",[201,227,230],{"href":228,"rel":229},"https:\u002F\u002Fluma.com\u002Forc1026",[204],"Register now.",[232,233,235],"h2",{"id":234},"whats-new",[222,236,237],{},"What’s new",[239,240,241,263,281,299,311],"ul",{},[242,243,244,247,248,251,252,256,257,262],"li",{},[222,245,246],{},"ORC Learning Hub:"," Hundreds of learners are now taking Modules 1 and 2 of the ",[201,249,210],{"href":208,"rel":250},[204],". Module 3, ",[253,254,255],"em",{},"Introduction to SBOMs and Vulnerability Management",", is under development. Join the ",[201,258,261],{"href":259,"rel":260},"https:\u002F\u002Fgithub.com\u002Forcwg\u002Forcwg\u002Ftree\u002Fmain\u002Fevents\u002Fcra-mondays#october-19-sboms-and-vulnerability-management-cra-training-community-review",[204],"CRA Monday on 19 October"," to help review the module before publication.",[242,264,265,268,269,274,275,280],{},[222,266,267],{},"AI Policy and Compliance SIG:"," The SIG approved its ",[201,270,273],{"href":271,"rel":272},"https:\u002F\u002Fgithub.com\u002Forcwg\u002Forcwg\u002Fblob\u002Fmain\u002Fai-policy-and-compliance-sig\u002Fscope.md",[204],"scope"," on 21 September, starting with the EU AI Act. Rachel Foucard of TYPO3 has joined Dave Russo of Red Hat as co-lead. The SIG is also ",[201,276,279],{"href":277,"rel":278},"https:\u002F\u002Fgithub.com\u002Forcwg\u002Forcwg\u002Fissues\u002F367",[204],"drafting a joint response"," to the ENISA consultation on AI-assisted software development, due 15 October.",[242,282,283,286,287,292,293,298],{},[222,284,285],{},"OCX 2027 call for proposals:"," ",[201,288,291],{"href":289,"rel":290},"https:\u002F\u002Focxconf.org\u002F",[204],"OCX 2027"," comes to Brussels 13-15 April 2027. ",[201,294,297],{"href":295,"rel":296},"https:\u002F\u002Focxconf.org\u002Fcall-for-proposals\u002F",[204],"Submit a talk"," to the Cybersecurity and Regulatory Compliance track.",[242,300,301,304,305,310],{},[222,302,303],{},"Save the date:"," Code & Compliance returns for its ",[201,306,309],{"href":307,"rel":308},"https:\u002F\u002Fcodeandcompliance.orcwg.org\u002Fcode-compliance-fosdem-edition-2027\u002F",[204],"FOSDEM Edition on 28 January 2027"," in Brussels. This edition is aimed at maintainers and engineers. The call for proposals and registration both open on 27 October.",[242,312,313,316,317,321],{},[222,314,315],{},"Share your SRP story:"," Now that CRA reporting obligations apply, we want to hear how organisations are adapting their vulnerability and incident reporting processes to the Single Reporting Platform. ",[201,318,320],{"href":319},"mailto:shanda.giacomoni@eclipse-foundation.org","Share your experience"," with us to help inform the community’s ongoing work.",[232,323,325],{"id":324},"cra-mondays",[222,326,327],{},"CRA Mondays",[197,329,330],{},"CRA Mondays are back after our summer hiatus. Catch up on September’s recordings:",[239,332,333,341],{},[242,334,335,340],{},[201,336,339],{"href":337,"rel":338},"https:\u002F\u002Fyoutu.be\u002FyXb2k8hbQ5M",[204],"Solving Copyright and Licensing Information in Client-Side JavaScript and CSS"," with Matija Šuklje",[242,342,343,348],{},[201,344,347],{"href":345,"rel":346},"https:\u002F\u002Fyoutu.be\u002FqGzLaMCLuk8",[204],"CRA Meets Machinery Regulation: Decentralised Digital Product Documentation"," with Merzough Münker",[197,350,351,352,355],{},"We’re looking for CRA Mondays speakers for November and December. ",[201,353,354],{"href":319},"Get in touch"," if you have a topic.",[232,357,359],{"id":358},"blogs-you-might-have-missed",[222,360,361],{},"Blogs you might have missed",[239,363,364,371,378],{},[242,365,366],{},[201,367,370],{"href":368,"rel":369},"https:\u002F\u002Forcwg.org\u002Fblog\u002Ffirst-cra-deadline-resources\u002F",[204],"Preparing for the First CRA Deadline: Resources for the Open Source Community",[242,372,373],{},[201,374,377],{"href":375,"rel":376},"https:\u002F\u002Forcwg.org\u002Fblog\u002Fh1-2026-update\u002F",[204],"ORC’s Impact in the First Half of 2026",[242,379,380],{},[201,381,384],{"href":382,"rel":383},"https:\u002F\u002Forcwg.org\u002Fblog\u002Fec-cra-guidelines\u002F",[204],"The European Commission publishes CRA implementation guidelines. Key takeaways for open source",[232,386,388],{"id":387},"upcoming-events",[222,389,390],{},"Upcoming events",[239,392,393,401,408,416,424,432],{},[242,394,395,400],{},[201,396,399],{"href":397,"rel":398},"https:\u002F\u002Fpartiful.com\u002Fe\u002Fdv9qSGilcF1gjVTMmYfh",[204],"Tech Week 2026: EU Cyber Resilience Act, Automating CI\u002FCD Compliance with AI"," | 13 October",[242,402,403,407],{},[201,404,406],{"href":259,"rel":405},[204],"CRA Monday: CRA Training Community Review"," | 19 October",[242,409,410,415],{},[201,411,414],{"href":412,"rel":413},"https:\u002F\u002Ftechexevent.com\u002Feurope\u002F",[204],"TechEx Europe 2026"," | 19-20 October",[242,417,418,423],{},[201,419,422],{"href":420,"rel":421},"https:\u002F\u002Fwww.etsi.org\u002Fevents\u002F2645-etsi-security-conference-oct2026\u002F",[204],"ETSI Security Conference 2026"," | 19-22 October",[242,425,426,431],{},[201,427,430],{"href":428,"rel":429},"https:\u002F\u002Fcodeandcompliance.orcwg.org\u002F",[204],"Code and Compliance"," | 27 October",[242,433,434,439],{},[201,435,438],{"href":436,"rel":437},"https:\u002F\u002Fnsss.se",[204],"Nordic Software Security Summit"," | 4-6 November | Stockholm",[197,441,442,443,448],{},"See all events on the ",[201,444,447],{"href":445,"rel":446},"https:\u002F\u002Forcwg.org\u002Fevents\u002F",[204],"ORC events page",".",[232,450,452],{"id":451},"how-to-participate",[222,453,454],{},"How to participate",[239,456,457,465,479,487,494],{},[242,458,459,460,448],{},"Join our calls on the ",[201,461,464],{"href":462,"rel":463},"https:\u002F\u002Fcalendar.google.com\u002Fcalendar\u002Fu\u002F0\u002Fembed?src=c_7db8e3f13c4fac984103918a97c704bb1d619da0fdb66d33f1747849b6020aea@group.calendar.google.com",[204],"community calendar",[242,466,467,468,473,474,448],{},"Subscribe to the ",[201,469,472],{"href":470,"rel":471},"https:\u002F\u002Faccounts.eclipse.org\u002Fmailing-list\u002Fopen-regulatory-compliance",[204],"mailing list"," or join us on ",[201,475,478],{"href":476,"rel":477},"https:\u002F\u002Fjoin.slack.com\u002Ft\u002Forcwg\u002Fshared_invite\u002Fzt-2vi7gi5ad-re2b35i95ar3WaVF2zoZaA",[204],"Slack",[242,480,481,482,448],{},"Contribute on ",[201,483,486],{"href":484,"rel":485},"https:\u002F\u002Fgithub.com\u002Forcwg\u002Forcwg",[204],"GitHub",[242,488,489,490,448],{},"Share news and events with us at ",[201,491,493],{"href":492},"mailto:news@eclipse.org","news@eclipse.org",[242,495,496,448],{},[201,497,500],{"href":498,"rel":499},"https:\u002F\u002Forcwg.org\u002Fmembership\u002Fbecome-a-member\u002F",[204],"Become a member",{"title":502,"searchDepth":503,"depth":503,"links":504},"",2,[505,506,507,508,509],{"id":234,"depth":503,"text":237},{"id":324,"depth":503,"text":327},{"id":358,"depth":503,"text":361},{"id":387,"depth":503,"text":390},{"id":451,"depth":503,"text":454},"2026-10-01","md",{},"\u002Fblog\u002Forc-monthly-sept2026",{"title":190},{"backgroundImage":516},"\u002Fabout\u002Fimages\u002Fhero-front.webp","blog\u002Forc-monthly-sept2026","n1IdXNKpRXX9Z6rl70RbTPdMx75PC9i9gAwz2nTiHjQ",[520],{"path":521,"visibility":191},"\u002Fblog",false,[524,527],{"path":525,"text":526},"\u002F","ORC",{"path":521,"text":109},1792684541335]