[{"data":1,"prerenderedAt":377},["ShallowReactive",2],{"site:settings":3,"site:navigation":49,"site:footer":126,"page:\u002Fcra\u002Fresources":188,"sections:\u002Fcra\u002Fresources":271,"feed:\u002Fcra\u002Fresources":92,"breadcrumbs:\u002Fcra\u002Fresources":274,"deliverables":280},{"id":4,"title":5,"callForAction":6,"description":9,"extension":10,"featuredContentPublishTarget":11,"keywords":12,"logo":18,"logoWidth":19,"meta":20,"search":21,"seoTitleSuffix":25,"skipLinkText":26,"socialImage":27,"socials":30,"stem":47,"__hash__":48},"settings\u002Fdata\u002Fsettings.yml","Open Regulatory Compliance Working Group",{"text":7,"href":8},"Get involved","\u002Fparticipate\u002F","The open source community is collaborating to establish common specifications for secure software development based on open source best practices.","yml","orc",[13,14,15,16,17],"regulatory compliance","cybersecurity processes","royalty-free patent licence","open source community collaboration","Eclipse Foundation Specification Process","\u002Fimages\u002Forc-logo.png",120,{},{"label":22,"placeholder":23,"menuLabel":24},"Search","Search the site…","Menu"," | Open Regulatory Compliance Working Group","Skip to main content",{"backgroundImage":28,"eyebrow":29},"\u002Fimages\u002Fog\u002Fbackground.jpg","orcwg.org",[31,35,39,43],{"name":32,"icon":33,"url":34},"LinkedIn","fa6-brands:linkedin-in","https:\u002F\u002Fwww.linkedin.com\u002Fshowcase\u002Fopen-regulatory-compliance\u002F",{"name":36,"icon":37,"url":38},"YouTube","fa6-brands:youtube","https:\u002F\u002Fwww.youtube.com\u002F@ORCWG",{"name":40,"icon":41,"url":42},"Bluesky","fa6-brands:bluesky","https:\u002F\u002Fbsky.app\u002Fprofile\u002Forcwg.org",{"name":44,"icon":45,"url":46},"Mastodon","fa6-brands:mastodon","https:\u002F\u002Ffosstodon.org\u002F@orcwg","data\u002Fsettings","bxtnzYEG4TQ27x8O_VKQIF-gc2dr-DNwF9_OpAZy3LA",{"id":50,"extension":10,"main":51,"meta":123,"stem":124,"__hash__":125},"navigation\u002Fdata\u002Fnavigation.yml",[52,70,82,99],{"text":53,"children":54},"About",[55,58,61,64,67],{"text":56,"href":57},"ORC Working Group","\u002Fabout\u002F",{"text":59,"href":60},"Cyber Resilience SIG","\u002Fspecial-interest-groups\u002Fcyber-resilience\u002F",{"text":62,"href":63},"AI Policy & Compliance SIG","\u002Fspecial-interest-groups\u002Fai-policy-and-compliance\u002F",{"text":65,"href":66},"Steering Committee","\u002Fcommittees\u002Fsteering-committee\u002F",{"text":68,"href":69},"Meeting Minutes","\u002Fcommittees\u002Fminutes\u002F",{"text":71,"children":72},"Membership",[73,76,79],{"text":74,"href":75},"Our Members","\u002Fmembership\u002F",{"text":77,"href":78},"Become a Member","\u002Fmembership\u002Fbecome-a-member\u002F",{"text":80,"href":81},"Participation and Membership FAQ","\u002Fabout\u002Fparticipation-and-membership-faq\u002F",{"id":83,"text":84,"children":85},"cra","Cyber Resilience Act",[86,89,93,96],{"text":87,"href":88},"About CRA","\u002Fcra\u002Fabout",{"text":90,"href":91,"external":92},"CRA FAQ","https:\u002F\u002Fcra.orcwg.org\u002F",true,{"text":94,"href":95},"CRA Resources","\u002Fcra\u002Fresources",{"text":97,"href":98,"external":92},"CRA Hub on GitHub","https:\u002F\u002Fgithub.com\u002Forcwg\u002Fcra-hub",{"text":100,"children":101},"Resources",[102,105,108,111,114,117,120],{"text":103,"href":104},"Events","\u002Fevents\u002F",{"text":106,"href":107},"Community Calendar","\u002Fresources\u002Fcalendar\u002F",{"text":109,"href":110},"Blog","\u002Fblog\u002F",{"text":112,"href":113},"Videos","\u002Fresources\u002Fvideos\u002F",{"text":115,"href":116},"Learning Hub","\u002Ftraining\u002F",{"text":118,"href":119},"Marketing Resources","\u002Fresources\u002Fmarketing-resources\u002F",{"text":121,"href":122,"external":92},"ORC Store","https:\u002F\u002Feclipse-foundation.store\u002Fcollections\u002Fopen-regulatory-compliance-orc",{},"data\u002Fnavigation","XYDVypNX67n8V4VQI_JTrw0cI16uV5jtctVXjN-DeKo",{"id":127,"backToTopText":128,"copyright":129,"extension":10,"manageCookiesText":130,"meta":131,"sections":132,"socialsHeading":185,"stem":186,"__hash__":187},"footer\u002Fdata\u002Ffooter.yml","Back to the top","Copyright © Eclipse Foundation AISBL. All Rights Reserved.","Manage Cookies",{},[133,150,169],{"id":134,"heading":135,"links":136},"footer-eclipse-foundation","Eclipse Foundation",[137,139,142,145,147],{"text":53,"href":138},"https:\u002F\u002Fwww.eclipse.org\u002Forg\u002F",{"text":140,"href":141},"Projects","https:\u002F\u002Fprojects.eclipse.org\u002F",{"text":143,"href":144},"Collaborations","https:\u002F\u002Fwww.eclipse.org\u002Fcollaborations\u002F",{"text":71,"href":146},"https:\u002F\u002Fwww.eclipse.org\u002Fmembership\u002F",{"text":148,"href":149},"Sponsor","https:\u002F\u002Fwww.eclipse.org\u002Fsponsor\u002F",{"id":151,"heading":152,"showManageCookies":92,"links":153},"footer-legal","Legal",[154,157,160,163,166],{"text":155,"href":156},"Privacy Policy","https:\u002F\u002Fwww.eclipse.org\u002Flegal\u002Fprivacy\u002F",{"text":158,"href":159},"Terms of Use","https:\u002F\u002Fwww.eclipse.org\u002Flegal\u002Fterms-of-use\u002F",{"text":161,"href":162},"Compliance","https:\u002F\u002Fwww.eclipse.org\u002Flegal\u002Fcompliance\u002F",{"text":164,"href":165},"Code of Conduct","https:\u002F\u002Fwww.eclipse.org\u002Forg\u002Fdocuments\u002FCommunity_Code_of_Conduct.php",{"text":167,"href":168},"Legal Resources","https:\u002F\u002Fwww.eclipse.org\u002Flegal\u002F",{"id":170,"heading":171,"links":172},"footer-more","More",[173,176,179,182],{"text":174,"href":175},"Report a Vulnerability","https:\u002F\u002Fwww.eclipse.org\u002Fsecurity\u002F",{"text":177,"href":178},"Service Status","https:\u002F\u002Fstatus.eclipse.org\u002F",{"text":180,"href":181},"Contact Us","https:\u002F\u002Fwww.eclipse.org\u002Forg\u002Ffoundation\u002Fcontact.php",{"text":183,"href":184},"Support","https:\u002F\u002Fwww.eclipse.org\u002Fprojects\u002Fsupport\u002F","Follow Us:","data\u002Ffooter","C-lpCHl9crwF3iQyRSh8y5g9ez5YgF4pi8aTv4pFLBM",{"id":189,"title":94,"aliases":190,"body":191,"breadcrumbTitle":190,"breadcrumbs":190,"date":190,"description":265,"extension":266,"featuredFooter":190,"header":190,"keywords":190,"meta":267,"navigation":92,"path":95,"redirectUrl":190,"rssFeed":190,"seo":268,"seoTitle":190,"socialImage":190,"stem":269,"typography":190,"visibility":190,"width":190,"__hash__":270},"pages\u002Fcra\u002Fresources\u002Findex.md",null,{"type":192,"value":193,"toc":262},"minimark",[194,198],[195,196],"deliverables-table",{"spacing-top":197},"medium",[199,200,202,254],"data-table",{"spacing-bottom":201},"large",[203,204,205,218],"table",{},[206,207,208],"thead",{},[209,210,211,215],"tr",{},[212,213,214],"th",{},"Status",[212,216,217],{},"Meaning",[219,220,221,230,238,246],"tbody",{},[209,222,223,227],{},[224,225,226],"td",{},"🗺️ Planned",[224,228,229],{},"Work has not yet started",[209,231,232,235],{},[224,233,234],{},"✍️ Work in Progress",[224,236,237],{},"Currently being developed",[209,239,240,243],{},[224,241,242],{},"🚀 Shipped",[224,244,245],{},"Complete and available",[209,247,248,251],{},[224,249,250],{},"❌ Cancelled",[224,252,253],{},"Will not be completed",[255,256,258],"template",{"v-slot:title":257},"",[259,260,261],"p",{},"Status Legend",{"title":257,"searchDepth":263,"depth":263,"links":264},2,[],"Deliverables from the Cyber Resilience SIG","md",{},{"title":94,"description":265},"cra\u002Fresources\u002Findex","uce672Yk9M1lGohapS8quwcne8abbnYH9fdPQiXazIs",[272],{"path":273,"visibility":190},"\u002Fcra",[275,278],{"path":276,"text":277},"\u002F","ORC",{"path":273,"text":279},"CRA",[281,285,289,294,298,302,306,310,314,318,322,326,330,334,338,343,347,351,355,359,364,369,373],{"path":282,"title":90,"number":283,"category":284,"status":234},"\u002Fcra\u002Fresources\u002Fd1-1-cra-faq","1.1","Documentation",{"path":286,"title":287,"number":288,"category":284,"status":234},"\u002Fcra\u002Fresources\u002Fd1-2-inventory","Inventory","1.2",{"path":290,"title":291,"number":292,"category":293,"status":242},"\u002Fcra\u002Fresources\u002Fd2-1-input-to-draft-implementing-act-on-product-categories","Input to draft implementing act on product categories","2.1","Submissions",{"path":295,"title":296,"number":297,"category":293,"status":242},"\u002Fcra\u002Fresources\u002Fd2-2-contribution-to-vulnerability-handling-standard-clause-44","Contribution to Vulnerability Handling Standard Clause 4.4","2.2",{"path":299,"title":300,"number":301,"category":293,"status":242},"\u002Fcra\u002Fresources\u002Fd2-3-contribution-to-open-source-eu-guidance-on-open-source-hardware","Contribution to open source EU Guidance on open source hardware","2.3",{"path":303,"title":304,"number":305,"category":293,"status":242},"\u002Fcra\u002Fresources\u002Fd2-5-comments-on-cencenelec-pt-1-standard","Comments on CEN\u002FCENELEC PT 1 Standard","2.5",{"path":307,"title":308,"number":309,"category":293,"status":242},"\u002Fcra\u002Fresources\u002Fd2-6-feedback-on-cybersecurity-act-csa-revision","Feedback on Cybersecurity Act (CSA) Revision","2.6",{"path":311,"title":312,"number":313,"category":293,"status":242},"\u002Fcra\u002Fresources\u002Fd2-7-comments-to-eu-guidance-on-open-source","Comments to EU Guidance on open source","2.7",{"path":315,"title":316,"number":317,"category":293,"status":242},"\u002Fcra\u002Fresources\u002Fd2-8-response-to-the-call-for-evidence-on-the-revision-of-the-standardisation-regulation-1025","Response to the Call for evidence on the revision of the Standardisation Regulation 1025","2.8",{"path":319,"title":320,"number":321,"category":293,"status":242},"\u002Fcra\u002Fresources\u002Fd2-9-comments-on-cencenelec-pt3-vulnerability-handling-standard","Comments on CEN\u002FCENELEC PT3 Vulnerability Handling Standard","2.9",{"path":323,"title":324,"number":325,"category":293,"status":242},"\u002Fcra\u002Fresources\u002Fd2-10-contribution-to-the-call-for-evidence-of-the-open-digital-ecosystems","Contribution to the call for evidence of the Open Digital Ecosystems","2.10",{"path":327,"title":328,"number":329,"category":293,"status":242},"\u002Fcra\u002Fresources\u002Fd2-11-contribution-to-the-call-for-feedback-of-the-cra-guidance-package","Contribution to the call for feedback of the CRA Guidance Package","2.11",{"path":331,"title":332,"number":333,"category":293,"status":242},"\u002Fcra\u002Fresources\u002Fd2-12-contribution-to-enisa-secure-by-design-and-default-playbook-consultation","Contribution to ENISA Secure by Design and Default Playbook consultation","2.12",{"path":335,"title":336,"number":337,"category":293,"status":242},"\u002Fcra\u002Fresources\u002Fd2-13-contribution-to-the-call-for-feedback-of-the-cyber-security-act","Contribution to the call for feedback of the Cyber Security Act","2.13",{"path":339,"title":340,"number":341,"category":342,"status":226},"\u002Fcra\u002Fresources\u002Fd3-1-white-paper-on-sboms","White paper on SBOMs","3.1","White papers",{"path":344,"title":345,"number":346,"category":342,"status":234},"\u002Fcra\u002Fresources\u002Fd3-2-white-paper-on-due-diligence-obligation-of-manufacturers","White paper on due diligence obligation of manufacturers","3.2",{"path":348,"title":349,"number":350,"category":342,"status":226},"\u002Fcra\u002Fresources\u002Fd3-3-white-paper-on-security-attestations","White paper on security attestations","3.3",{"path":352,"title":353,"number":354,"category":342,"status":226},"\u002Fcra\u002Fresources\u002Fd3-4-white-paper-on-types-of-open-source-projects","White paper on types of open source projects","3.4",{"path":356,"title":357,"number":358,"category":342,"status":242},"\u002Fcra\u002Fresources\u002Fd3-5-white-paper-on-open-source-software-stewards-and-cra","White paper on open source software stewards and CRA","3.5",{"path":360,"title":361,"number":362,"category":363,"status":234},"\u002Fcra\u002Fresources\u002Fd4-1-vulnerability-management-specification","Vulnerability management specification","4.1","Specifications",{"path":365,"title":366,"number":367,"category":363,"status":368},"\u002Fcra\u002Fresources\u002Fd4-2-specification-on-principles-for-cyber-resilience-for-open-source-development","Specification on principles for cyber resilience for open source development","4.2","💡 Proposed",{"path":370,"title":371,"number":372,"category":363,"status":368},"\u002Fcra\u002Fresources\u002Fd4-3-specification-on-generic-security-requirements-for-open-source-components","Specification on generic security requirements for open source components","4.3",{"path":374,"title":375,"number":376,"category":363,"status":368},"\u002Fcra\u002Fresources\u002Fd4-4-security-policy-for-open-source-software-stewards","Security policy for open source software stewards","4.4",1792684537978]