[{"data":1,"prerenderedAt":492},["ShallowReactive",2],{"site:settings":3,"site:navigation":50,"site:footer":188,"page:\u002Fspecial-interest-groups\u002Fcyber-resilience":259,"sections:\u002Fspecial-interest-groups\u002Fcyber-resilience":488,"feed:\u002Fspecial-interest-groups\u002Fcyber-resilience":491},{"id":4,"title":5,"callForAction":6,"description":9,"extension":10,"featuredContentPublishTarget":11,"keywords":12,"logo":18,"logoInverse":19,"logoWidth":20,"meta":21,"search":22,"seoTitleSuffix":26,"skipLinkText":27,"socialImage":28,"socials":31,"stem":48,"__hash__":49},"settings\u002Fdata\u002Fsettings.yml","Open Regulatory Compliance Working Group",{"text":7,"href":8},"Get involved","\u002Fparticipate\u002F","The open source community is collaborating to establish common specifications for secure software development based on open source best practices.","yml","orc",[13,14,15,16,17],"regulatory compliance","cybersecurity processes","royalty-free patent licence","open source community collaboration","Eclipse Foundation Specification Process","\u002Fimages\u002Forc-logo.png","\u002Fimages\u002Forc-logo-white.png",120,{},{"label":23,"placeholder":24,"menuLabel":25},"Search","Search the site…","Menu"," | Open Regulatory Compliance Working Group","Skip to main content",{"backgroundImage":29,"eyebrow":30},"\u002Fimages\u002Fog\u002Fbackground.jpg","orcwg.org",[32,36,40,44],{"name":33,"icon":34,"url":35},"LinkedIn","fa6-brands:linkedin-in","https:\u002F\u002Fwww.linkedin.com\u002Fshowcase\u002Fopen-regulatory-compliance\u002F",{"name":37,"icon":38,"url":39},"YouTube","fa6-brands:youtube","https:\u002F\u002Fwww.youtube.com\u002F@ORCWG",{"name":41,"icon":42,"url":43},"Bluesky","fa6-brands:bluesky","https:\u002F\u002Fbsky.app\u002Fprofile\u002Forcwg.org",{"name":45,"icon":46,"url":47},"Mastodon","fa6-brands:mastodon","https:\u002F\u002Ffosstodon.org\u002F@orcwg","data\u002Fsettings","opDtngGjWxBs98xPIKWruIBzQA4dM2mXdSD9ch0CVGg",{"id":51,"extension":10,"main":52,"meta":185,"stem":186,"__hash__":187},"navigation\u002Fdata\u002Fnavigation.yml",[53,86,110,142],{"text":54,"featured":55,"children":60},"About",{"eyebrow":56,"title":57,"text":58,"link":59},"About ORC","A global, industry-led collaboration","Helping organisations understand and implement open source compliance under evolving regulations like the CRA.",{"text":7,"href":8},[61,66,71,76,81],{"text":62,"href":63,"description":64,"icon":65},"ORC Working Group","\u002Fabout\u002F","Our mission, purpose and who is involved","lucide:users",{"text":67,"href":68,"description":69,"icon":70},"Cyber Resilience SIG","\u002Fspecial-interest-groups\u002Fcyber-resilience\u002F","Navigating cyber resilience regulation","lucide:shield-check",{"text":72,"href":73,"description":74,"icon":75},"AI Policy & Compliance SIG","\u002Fspecial-interest-groups\u002Fai-policy-and-compliance\u002F","AI regulation, policy and standardisation","lucide:sparkles",{"text":77,"href":78,"description":79,"icon":80},"Steering Committee","\u002Fcommittees\u002Fsteering-committee\u002F","Strategic direction and governance","lucide:landmark",{"text":82,"href":83,"description":84,"icon":85},"Meeting Minutes","\u002Fcommittees\u002Fminutes\u002F","Approved committee minutes","lucide:file-text",{"text":87,"featured":88,"children":95},"Membership",{"eyebrow":89,"title":90,"text":91,"link":92},"Join the group","Any individual or organisation can take part","Participation is open to everyone. Formal membership is for organisations that want to lead.",{"text":93,"href":94},"Become a member","\u002Fmembership\u002Fbecome-a-member\u002F",[96,101,105],{"text":97,"href":98,"description":99,"icon":100},"Our Members","\u002Fmembership\u002F","Strategic, Participant, Foundation and Guest","lucide:layout-grid",{"text":102,"href":94,"description":103,"icon":104},"Become a Member","Levels, benefits and how to join","lucide:log-in",{"text":106,"href":107,"description":108,"icon":109},"Participation and Membership FAQ","\u002Fabout\u002Fparticipation-and-membership-faq\u002F","Participating versus formal membership","lucide:circle-question-mark",{"id":111,"text":112,"featured":113,"children":120},"cra","Cyber Resilience Act",{"eyebrow":114,"title":115,"text":116,"link":117},"ORC learning hub","Understand the CRA for open source","Free, practical training developed by the working group, with role-specific guidance.",{"text":118,"href":119},"Start learning","\u002Ftraining\u002F",[121,126,132,137],{"text":122,"href":123,"description":124,"icon":125},"About CRA","\u002Fcra\u002Fabout","What the Act means for open source","lucide:info",{"text":127,"href":128,"external":129,"description":130,"icon":131},"CRA FAQ","https:\u002F\u002Fcra.orcwg.org\u002F",true,"Answers to common CRA questions","lucide:message-circle-question-mark",{"text":133,"href":134,"description":135,"icon":136},"CRA Resources","\u002Fcra\u002Fresources","White papers, submissions and specifications","lucide:files",{"text":138,"href":139,"external":129,"description":140,"icon":141},"CRA Hub on GitHub","https:\u002F\u002Fgithub.com\u002Forcwg\u002Fcra-hub","Where the CRA work happens","lucide:code",{"text":143,"featured":144,"children":151},"Resources",{"eyebrow":145,"title":146,"text":147,"link":148},"Stay in the loop","Events and community calls","See what is coming up across the working group, and watch past webinars.",{"text":149,"href":150},"View events","\u002Fevents\u002F",[152,156,161,166,171,175,180],{"text":153,"href":150,"description":154,"icon":155},"Events","Upcoming ORC events","lucide:map-pin",{"text":157,"href":158,"description":159,"icon":160},"Community Calendar","\u002Fresources\u002Fcalendar\u002F","Meetings and calls","lucide:calendar",{"text":162,"href":163,"description":164,"icon":165},"Blog","\u002Fblog\u002F","News and updates","lucide:pen-line",{"text":167,"href":168,"description":169,"icon":170},"Videos","\u002Fresources\u002Fvideos\u002F","Webinars and recordings","lucide:video",{"text":172,"href":119,"description":173,"icon":174},"Learning Hub","Free CRA training","lucide:graduation-cap",{"text":176,"href":177,"description":178,"icon":179},"Marketing Resources","\u002Fresources\u002Fmarketing-resources\u002F","Assets to help spread the word","lucide:tag",{"text":181,"href":182,"external":129,"description":183,"icon":184},"ORC Store","https:\u002F\u002Feclipse-foundation.store\u002Fcollections\u002Fopen-regulatory-compliance-orc","Official ORC merchandise","lucide:shopping-bag",{},"data\u002Fnavigation","ag7dBML-eg0sUPtFSFTVYzLhyzuFdY3pKgAwuAK6eps",{"id":189,"backToTopText":190,"callToAction":191,"copyright":199,"description":200,"extension":10,"manageCookiesText":201,"meta":202,"sections":203,"socialsHeading":256,"stem":257,"__hash__":258},"footer\u002Fdata\u002Ffooter.yml","Back to the top",{"eyebrow":192,"title":193,"buttons":194},"Join the community","Help shape how open source meets regulation.",[195,197],{"text":7,"href":8,"color":196},"secondary",{"text":198,"href":98,"outlined":129},"See our members","Copyright © Eclipse Foundation AISBL. All rights reserved.","A working group hosted by the Eclipse Foundation.","Manage cookies",{},[204,221,240],{"id":205,"heading":206,"links":207},"footer-eclipse-foundation","Eclipse Foundation",[208,210,213,216,218],{"text":54,"href":209},"https:\u002F\u002Fwww.eclipse.org\u002Forg\u002F",{"text":211,"href":212},"Projects","https:\u002F\u002Fprojects.eclipse.org\u002F",{"text":214,"href":215},"Collaborations","https:\u002F\u002Fwww.eclipse.org\u002Fcollaborations\u002F",{"text":87,"href":217},"https:\u002F\u002Fwww.eclipse.org\u002Fmembership\u002F",{"text":219,"href":220},"Sponsor","https:\u002F\u002Fwww.eclipse.org\u002Fsponsor\u002F",{"id":222,"heading":223,"showManageCookies":129,"links":224},"footer-legal","Legal",[225,228,231,234,237],{"text":226,"href":227},"Privacy policy","https:\u002F\u002Fwww.eclipse.org\u002Flegal\u002Fprivacy\u002F",{"text":229,"href":230},"Terms of use","https:\u002F\u002Fwww.eclipse.org\u002Flegal\u002Fterms-of-use\u002F",{"text":232,"href":233},"Compliance","https:\u002F\u002Fwww.eclipse.org\u002Flegal\u002Fcompliance\u002F",{"text":235,"href":236},"Code of conduct","https:\u002F\u002Fwww.eclipse.org\u002Forg\u002Fdocuments\u002FCommunity_Code_of_Conduct.php",{"text":238,"href":239},"Legal resources","https:\u002F\u002Fwww.eclipse.org\u002Flegal\u002F",{"id":241,"heading":242,"links":243},"footer-more","More",[244,247,250,253],{"text":245,"href":246},"Report a vulnerability","https:\u002F\u002Fwww.eclipse.org\u002Fsecurity\u002F",{"text":248,"href":249},"Service status","https:\u002F\u002Fstatus.eclipse.org\u002F",{"text":251,"href":252},"Contact us","https:\u002F\u002Fwww.eclipse.org\u002Forg\u002Ffoundation\u002Fcontact.php",{"text":254,"href":255},"Support","https:\u002F\u002Fwww.eclipse.org\u002Fprojects\u002Fsupport\u002F","Follow us","data\u002Ffooter","J1YI_5Yy-Ti8vjCnpW13BzZswHHbrtItLM0oYyNFusk",{"id":260,"title":261,"aliases":262,"body":263,"breadcrumbTitle":262,"breadcrumbs":479,"date":262,"description":480,"extension":481,"featuredFooter":262,"header":262,"keywords":262,"meta":482,"navigation":129,"path":483,"redirectUrl":262,"rssFeed":262,"seo":484,"seoTitle":485,"socialImage":262,"stem":486,"visibility":262,"width":399,"__hash__":487},"pages\u002Fspecial-interest-groups\u002Fcyber-resilience.md","Cyber Resilience Special Interest Group (SIG)",null,{"type":264,"value":265,"toc":476},"minimark",[266,291,317,374,436],[267,268,270,274,281],"hero",{"variant":269},"plain",[271,272,273],"p",{},"An active initiative within the ORC Working Group that formalises our ongoing efforts to help open source communities and the tech industry navigate cyber resilience regulations, including the European Cyber Resilience Act.",[275,276,278],"template",{"v-slot:eyebrow":277},"",[271,279,280],{},"Special interest group",[275,282,283],{"v-slot:title":277},[271,284,285,286],{},"Cyber Resilience ",[287,288,290],"typography",{"color":289},"primary","SIG",[292,293,296,301,309],"page-section",{"title-style":294,"title-align":295},"heading","split",[275,297,298],{"v-slot:eyebrow":277},[271,299,300],{},"A broader perspective",[275,302,303],{"v-slot:title":277},[271,304,305,306],{},"Cyber resilience is a ",[287,307,308],{"color":289},"global concern.",[275,310,311,314],{"v-slot:intro":277},[271,312,313],{},"While the CRA has been a major focus, this SIG takes a broader perspective, addressing regulations that impact open source communities worldwide.",[271,315,316],{},"As new regulations emerge, the working group anticipates the formation of additional SIGs, modelled on this initiative.",[292,318,320,359,364,369],{"background":319,"title-style":294},"tint",[321,322,323,342],"people-list",{},[324,325,326,331,339],"person-card",{},[275,327,328],{"v-slot:title":277},[271,329,330],{},"Dirk-Willem van Gulik",[275,332,333],{"v-slot:media":277},[271,334,335],{},[336,337],"img",{"alt":330,"src":338},"\u002Fspecial-interest-groups\u002Fcyber-resilience\u002Fimages\u002Fdirk-willem-van-gulik.jpg",[271,340,341],{},"VP of Public Policy, Apache Software",[324,343,344,349,356],{},[275,345,346],{"v-slot:title":277},[271,347,348],{},"Timo Perala",[275,350,351],{"v-slot:media":277},[271,352,353],{},[336,354],{"alt":348,"src":355},"\u002Fspecial-interest-groups\u002Fcyber-resilience\u002Fimages\u002Ftimo-perala.jpg",[271,357,358],{},"Head of Software and Internet Standardisation, Nokia Networks",[275,360,361],{"v-slot:eyebrow":277},[271,362,363],{},"Leads",[275,365,366],{"v-slot:title":277},[271,367,368],{},"Who guides the SIG.",[275,370,371],{"v-slot:watermark":277},[271,372,373],{},"leads",[292,375,378,421,426,431],{"background":376,"title-style":294,"title-align":377},"grey","side",[379,380,381,384,389,417],"card",{},[287,382,7],{"variant":383},"overline",[385,386,388],"h3",{"id":387},"three-ways-in","Three ways in",[390,391,393,404,411],"stack",{"gap":392,"spacing-top":392},"small",[394,395,401],"button-link",{"href":396,"icon":397,"icon-position":398,"width":399,"color":400},"https:\u002F\u002Forcwg.slack.com\u002Farchives\u002FC087BS1999Q","lucide:arrow-right","after","full","tertiary",[271,402,403],{},"Join #cyber-resilience-sig on Slack",[394,405,408],{"href":406,"icon":397,"icon-position":398,"width":399,":outlined":407},"https:\u002F\u002Fgithub.com\u002Forcwg\u002Forcwg\u002Ftree\u002Fmain\u002Fcyber-resilience-sig","true",[271,409,410],{},"Contribute on GitHub",[394,412,414],{"href":413,"icon":397,"icon-position":398,"width":399,":outlined":407},"https:\u002F\u002Faccounts.eclipse.org\u002Fmailing-list\u002Fopen-regulatory-compliance",[271,415,416],{},"Start a thread on the mailing list",[287,418,420],{"variant":419},"caption","As a member of ORC, you are welcome to join the SIG through any of these.",[275,422,423],{"v-slot:eyebrow":277},[271,424,425],{},"Who should join?",[275,427,428],{"v-slot:title":277},[271,429,430],{},"Open to all who want to shape the discussion.",[275,432,433],{"v-slot:intro":277},[271,434,435],{},"Participation is open to everyone interested in contributing to industry-wide efforts to improve cyber resilience. Given the working group’s current priorities, most existing members are expected to engage with this SIG.",[292,437,439],{"background":438},"band",[440,441,443,461],"grid",{"columns":442},"2",[379,444,447,450,454,457],{"href":445,"variant":446},"\u002Fcra\u002Fresources\u002F","translucent",[287,448,449],{"variant":383},"Deliverables",[385,451,453],{"id":452},"see-what-the-sig-has-produced","See what the SIG has produced.",[271,455,456],{},"Submissions, white papers and specifications on the CRA.",[287,458,460],{"color":289,"weight":459},"semibold","CRA resources →",[379,462,463,466,470,473],{"href":73,"variant":446},[287,464,465],{"variant":383},"Another SIG",[385,467,469],{"id":468},"ai-policy-and-compliance-sig","AI Policy and Compliance SIG",[271,471,472],{},"Explore the working group’s other special interest group.",[287,474,475],{"color":289,"weight":459},"Visit the SIG →",{"title":277,"searchDepth":477,"depth":477,"links":478},2,[],"hidden","The Cyber Resilience SIG is an active initiative within the Open Regulatory Compliance (ORC) Working Group. This SIG formalizes the working group’s ongoing efforts to help open source communities and the tech industry navigate cyber resilience regulations, including but not limited to the European Cyber Resilience Act (CRA).","md",{},"\u002Fspecial-interest-groups\u002Fcyber-resilience",{"title":261,"description":480},"Cyber Resilience SIG | Special Interest Groups | Open Regulatory Compliance Working Group","special-interest-groups\u002Fcyber-resilience","q0EG5fNTkv4yzdLNj62s4yZ_T619DnYtmS4PgDQMKjQ",[489],{"path":490,"visibility":262},"\u002Fspecial-interest-groups",false,1792767599277]