Open Regulatory Compliance
@orcwg.org
Leading regulatory compliance for open source.
Hosted by @eclipse.org
Hosted by @eclipse.org
📢 Present at Code & Compliance 2026!
We’re looking for panels, presentations, roundtables, or workshops on topics such as tooling, attestations, stewardship, standardisation, or policy.
👉 Submit your talk before 25 November: www-eur.cvent.com/c/abstracts/...
We’re looking for panels, presentations, roundtables, or workshops on topics such as tooling, attestations, stewardship, standardisation, or policy.
👉 Submit your talk before 25 November: www-eur.cvent.com/c/abstracts/...
November 14, 2025 at 11:35 AM
📢 Present at Code & Compliance 2026!
We’re looking for panels, presentations, roundtables, or workshops on topics such as tooling, attestations, stewardship, standardisation, or policy.
👉 Submit your talk before 25 November: www-eur.cvent.com/c/abstracts/...
We’re looking for panels, presentations, roundtables, or workshops on topics such as tooling, attestations, stewardship, standardisation, or policy.
👉 Submit your talk before 25 November: www-eur.cvent.com/c/abstracts/...
New project!
🔐 The objective of the Cyber Resilience Attestations project is to propose a means to support the due diligence responsibilities of manufacturers who rely on F/OSS components.
Learn more: projects.eclipse.org/projects/tec...
🔐 The objective of the Cyber Resilience Attestations project is to propose a means to support the due diligence responsibilities of manufacturers who rely on F/OSS components.
Learn more: projects.eclipse.org/projects/tec...
November 13, 2025 at 8:34 AM
New project!
🔐 The objective of the Cyber Resilience Attestations project is to propose a means to support the due diligence responsibilities of manufacturers who rely on F/OSS components.
Learn more: projects.eclipse.org/projects/tec...
🔐 The objective of the Cyber Resilience Attestations project is to propose a means to support the due diligence responsibilities of manufacturers who rely on F/OSS components.
Learn more: projects.eclipse.org/projects/tec...
The countdown is on!
Manufacturers have less than a year to comply with the #CyberResilienceAct’s vulnerability reporting requirements.
📘 Explore our resources to help your team prepare: orcwg.org/cra/
#CRA #CyberResilience #ORCWG
Manufacturers have less than a year to comply with the #CyberResilienceAct’s vulnerability reporting requirements.
📘 Explore our resources to help your team prepare: orcwg.org/cra/
#CRA #CyberResilience #ORCWG
November 11, 2025 at 9:45 AM
The countdown is on!
Manufacturers have less than a year to comply with the #CyberResilienceAct’s vulnerability reporting requirements.
📘 Explore our resources to help your team prepare: orcwg.org/cra/
#CRA #CyberResilience #ORCWG
Manufacturers have less than a year to comply with the #CyberResilienceAct’s vulnerability reporting requirements.
📘 Explore our resources to help your team prepare: orcwg.org/cra/
#CRA #CyberResilience #ORCWG
What is an #opensource software steward?
🌐 Open source software steward is a term defined in Article 3(14) of the CRA. However, the discussion on this topic is ongoing.
Check our ongoing #CRAFAQ discussion on GitHub and share your thoughts and contributions!
github.com/orcwg/cra-hu...
🌐 Open source software steward is a term defined in Article 3(14) of the CRA. However, the discussion on this topic is ongoing.
Check our ongoing #CRAFAQ discussion on GitHub and share your thoughts and contributions!
github.com/orcwg/cra-hu...
November 10, 2025 at 9:01 AM
What is an #opensource software steward?
🌐 Open source software steward is a term defined in Article 3(14) of the CRA. However, the discussion on this topic is ongoing.
Check our ongoing #CRAFAQ discussion on GitHub and share your thoughts and contributions!
github.com/orcwg/cra-hu...
🌐 Open source software steward is a term defined in Article 3(14) of the CRA. However, the discussion on this topic is ongoing.
Check our ongoing #CRAFAQ discussion on GitHub and share your thoughts and contributions!
github.com/orcwg/cra-hu...
💻 Open source AI in automotive: legal & compliance implications
Join us on 6 November 2025 at 3 PM CET for a practical briefing with Dr. Lina Böcker.
👉 Register now: www.crowdcast.io/c/ocx-day4-c...
Join us on 6 November 2025 at 3 PM CET for a practical briefing with Dr. Lina Böcker.
👉 Register now: www.crowdcast.io/c/ocx-day4-c...
October 30, 2025 at 9:12 AM
💻 Open source AI in automotive: legal & compliance implications
Join us on 6 November 2025 at 3 PM CET for a practical briefing with Dr. Lina Böcker.
👉 Register now: www.crowdcast.io/c/ocx-day4-c...
Join us on 6 November 2025 at 3 PM CET for a practical briefing with Dr. Lina Böcker.
👉 Register now: www.crowdcast.io/c/ocx-day4-c...
🤔 Can a solo maintainer be considered to be an #opensource software steward? What do you think?
Share your feedback on our CRA FAQ document: github.com/orcwg/cra-hu...
Share your feedback on our CRA FAQ document: github.com/orcwg/cra-hu...
October 29, 2025 at 10:12 AM
🤔 Can a solo maintainer be considered to be an #opensource software steward? What do you think?
Share your feedback on our CRA FAQ document: github.com/orcwg/cra-hu...
Share your feedback on our CRA FAQ document: github.com/orcwg/cra-hu...
✅ Compliance isn’t about ticking boxes; it’s about building trust in open source.
At #OCX26, the Open Community for Compliance invites proposals on regulatory requirements, the CRA, certification, and standardisation.
Send your proposal before 13 November! www.ocxconf.org/event/403bff...
At #OCX26, the Open Community for Compliance invites proposals on regulatory requirements, the CRA, certification, and standardisation.
Send your proposal before 13 November! www.ocxconf.org/event/403bff...
October 28, 2025 at 11:34 AM
✅ Compliance isn’t about ticking boxes; it’s about building trust in open source.
At #OCX26, the Open Community for Compliance invites proposals on regulatory requirements, the CRA, certification, and standardisation.
Send your proposal before 13 November! www.ocxconf.org/event/403bff...
At #OCX26, the Open Community for Compliance invites proposals on regulatory requirements, the CRA, certification, and standardisation.
Send your proposal before 13 November! www.ocxconf.org/event/403bff...
I am NOT subject to the CRA, and want to make this clear to downstream users. What should I say?
Help answer this question in our CRA FAQ document.
Contribute to the discussion 👇
github.com/orcwg/cra-hu...
Help answer this question in our CRA FAQ document.
Contribute to the discussion 👇
github.com/orcwg/cra-hu...
cra-hub/faq/maintainers/transparency.md at main · orcwg/cra-hub
Everything you ever wanted to know about the CRA and its implementation - orcwg/cra-hub
github.com
October 23, 2025 at 9:02 AM
I am NOT subject to the CRA, and want to make this clear to downstream users. What should I say?
Help answer this question in our CRA FAQ document.
Contribute to the discussion 👇
github.com/orcwg/cra-hu...
Help answer this question in our CRA FAQ document.
Contribute to the discussion 👇
github.com/orcwg/cra-hu...
Francisco Carneiro will introduce the @eclipse.org Open Regulatory Compliance WG at #SFSCON in Bolzano.
Join his session on 7 November to explore how the working group brings together key stakeholders to co-develop reusable tools.
Don’t miss it 👉 pretix.eu/noi-digital/...
Join his session on 7 November to explore how the working group brings together key stakeholders to co-develop reusable tools.
Don’t miss it 👉 pretix.eu/noi-digital/...
October 21, 2025 at 10:04 AM
Francisco Carneiro will introduce the @eclipse.org Open Regulatory Compliance WG at #SFSCON in Bolzano.
Join his session on 7 November to explore how the working group brings together key stakeholders to co-develop reusable tools.
Don’t miss it 👉 pretix.eu/noi-digital/...
Join his session on 7 November to explore how the working group brings together key stakeholders to co-develop reusable tools.
Don’t miss it 👉 pretix.eu/noi-digital/...
📢 Contribute to the FAQ on the Cyber Resilience Act (#CRA) and have an impact!
Some questions around open source projects, maintainers, stewards, or CRA standards are still being discussed. We need your input.
👉 Check out the CRA FAQ and share your feedback with us! github.com/orcwg/cra-hu...
Some questions around open source projects, maintainers, stewards, or CRA standards are still being discussed. We need your input.
👉 Check out the CRA FAQ and share your feedback with us! github.com/orcwg/cra-hu...
cra-hub/faq.md at main · orcwg/cra-hub
Everything you ever wanted to know about the CRA and its implementation - orcwg/cra-hub
github.com
October 17, 2025 at 9:14 AM
📢 Contribute to the FAQ on the Cyber Resilience Act (#CRA) and have an impact!
Some questions around open source projects, maintainers, stewards, or CRA standards are still being discussed. We need your input.
👉 Check out the CRA FAQ and share your feedback with us! github.com/orcwg/cra-hu...
Some questions around open source projects, maintainers, stewards, or CRA standards are still being discussed. We need your input.
👉 Check out the CRA FAQ and share your feedback with us! github.com/orcwg/cra-hu...
Discover the ORC’s Cyber Resilience SIG deliverables plan:
✅ Navigate the deliverables plan and see CRA-related projects
✅ Understand the scope of each deliverable
✅ Find ways to get involved and contribute
🎥 Watch video: www.youtube.com/watch?v=QamK...
📝 Read the blog: orcwg.org/blog/how-to-...
✅ Navigate the deliverables plan and see CRA-related projects
✅ Understand the scope of each deliverable
✅ Find ways to get involved and contribute
🎥 Watch video: www.youtube.com/watch?v=QamK...
📝 Read the blog: orcwg.org/blog/how-to-...
How to Contribute to ORC Deliverables
Want to shape how the Cyber Resilience Act (CRA) impacts the open source ecosystem? This video walks you through the ORC’s Cyber Resilience SIG deliverables plan and explains how you can see which…
www.youtube.com
October 16, 2025 at 8:41 AM
Discover the ORC’s Cyber Resilience SIG deliverables plan:
✅ Navigate the deliverables plan and see CRA-related projects
✅ Understand the scope of each deliverable
✅ Find ways to get involved and contribute
🎥 Watch video: www.youtube.com/watch?v=QamK...
📝 Read the blog: orcwg.org/blog/how-to-...
✅ Navigate the deliverables plan and see CRA-related projects
✅ Understand the scope of each deliverable
✅ Find ways to get involved and contribute
🎥 Watch video: www.youtube.com/watch?v=QamK...
📝 Read the blog: orcwg.org/blog/how-to-...
🎤 It’s #CRA time at The Things Conference!
@j-rico.bsky.social, Senior Program Manager @orcwg.org at @eclipse.org is on stage in Amsterdam delivering the keynote “Will the CRA Break Open Source in #IoT, or Make It Stronger?”
#EclipseFdn #opensource #CyberResilienceAct
@j-rico.bsky.social, Senior Program Manager @orcwg.org at @eclipse.org is on stage in Amsterdam delivering the keynote “Will the CRA Break Open Source in #IoT, or Make It Stronger?”
#EclipseFdn #opensource #CyberResilienceAct
September 24, 2025 at 12:20 PM
🎤 It’s #CRA time at The Things Conference!
@j-rico.bsky.social, Senior Program Manager @orcwg.org at @eclipse.org is on stage in Amsterdam delivering the keynote “Will the CRA Break Open Source in #IoT, or Make It Stronger?”
#EclipseFdn #opensource #CyberResilienceAct
@j-rico.bsky.social, Senior Program Manager @orcwg.org at @eclipse.org is on stage in Amsterdam delivering the keynote “Will the CRA Break Open Source in #IoT, or Make It Stronger?”
#EclipseFdn #opensource #CyberResilienceAct
Why attend the Code & Compliance Community Day?
1️⃣ Deepen your understanding of the #CRA
2️⃣ Be part of the discussions shaping CRA compliance
3️⃣ Attend the OpenForum Europe's roundtable “Solving the Standardisation Dilemma”
orcwg.org/blog/code-co...
www.eclipse-foundation.events/event/Code-a...
1️⃣ Deepen your understanding of the #CRA
2️⃣ Be part of the discussions shaping CRA compliance
3️⃣ Attend the OpenForum Europe's roundtable “Solving the Standardisation Dilemma”
orcwg.org/blog/code-co...
www.eclipse-foundation.events/event/Code-a...
September 8, 2025 at 7:21 AM
Why attend the Code & Compliance Community Day?
1️⃣ Deepen your understanding of the #CRA
2️⃣ Be part of the discussions shaping CRA compliance
3️⃣ Attend the OpenForum Europe's roundtable “Solving the Standardisation Dilemma”
orcwg.org/blog/code-co...
www.eclipse-foundation.events/event/Code-a...
1️⃣ Deepen your understanding of the #CRA
2️⃣ Be part of the discussions shaping CRA compliance
3️⃣ Attend the OpenForum Europe's roundtable “Solving the Standardisation Dilemma”
orcwg.org/blog/code-co...
www.eclipse-foundation.events/event/Code-a...
🔐 Are you interested in the #CRA? September is packed with events!
1️⃣ Comply.Land – Malta, 11-12 September
2️⃣ Bitkom Open Source Forum – Erfurt, 18 September
3️⃣ The Things Conference – Amsterdam, 23–24 September
👋 Connect with Juan Rico, from the ORC, at Bitkom & The Things Conference.
1️⃣ Comply.Land – Malta, 11-12 September
2️⃣ Bitkom Open Source Forum – Erfurt, 18 September
3️⃣ The Things Conference – Amsterdam, 23–24 September
👋 Connect with Juan Rico, from the ORC, at Bitkom & The Things Conference.
September 5, 2025 at 8:01 AM
🔐 Are you interested in the #CRA? September is packed with events!
1️⃣ Comply.Land – Malta, 11-12 September
2️⃣ Bitkom Open Source Forum – Erfurt, 18 September
3️⃣ The Things Conference – Amsterdam, 23–24 September
👋 Connect with Juan Rico, from the ORC, at Bitkom & The Things Conference.
1️⃣ Comply.Land – Malta, 11-12 September
2️⃣ Bitkom Open Source Forum – Erfurt, 18 September
3️⃣ The Things Conference – Amsterdam, 23–24 September
👋 Connect with Juan Rico, from the ORC, at Bitkom & The Things Conference.
With more than 600 videos relevant to the #Java community, #JakartaEE's YouTube channel has something for everyone.
Check it out and be sure to subscribe.
www.youtube.com/channel/UC4M...
Check it out and be sure to subscribe.
www.youtube.com/channel/UC4M...
September 4, 2025 at 9:34 AM
With more than 600 videos relevant to the #Java community, #JakartaEE's YouTube channel has something for everyone.
Check it out and be sure to subscribe.
www.youtube.com/channel/UC4M...
Check it out and be sure to subscribe.
www.youtube.com/channel/UC4M...
🔐 Why attend Comply.Land 2025? Because regulatory frameworks are shaping the future of technology, and this is your chance to be part of the conversation.
The #ORC community will be there, sharing our work on aligning open source practices with evolving compliance requirements.
👉 hubs.la/Q03FqKSK0
The #ORC community will be there, sharing our work on aligning open source practices with evolving compliance requirements.
👉 hubs.la/Q03FqKSK0
September 1, 2025 at 2:38 PM
🔐 Why attend Comply.Land 2025? Because regulatory frameworks are shaping the future of technology, and this is your chance to be part of the conversation.
The #ORC community will be there, sharing our work on aligning open source practices with evolving compliance requirements.
👉 hubs.la/Q03FqKSK0
The #ORC community will be there, sharing our work on aligning open source practices with evolving compliance requirements.
👉 hubs.la/Q03FqKSK0
In this #CRAMondays session, we’ll hear directly from leaders shaping software transparency standards: Steve Springett, Olle E Johansson, Philippe Ombredanne
Find out how Ecma and OWASP are creating practical solutions for secure, transparent supply chains.
🗓 calendar.google.com/calendar/eve...
Find out how Ecma and OWASP are creating practical solutions for secure, transparent supply chains.
🗓 calendar.google.com/calendar/eve...
August 20, 2025 at 11:37 AM
In this #CRAMondays session, we’ll hear directly from leaders shaping software transparency standards: Steve Springett, Olle E Johansson, Philippe Ombredanne
Find out how Ecma and OWASP are creating practical solutions for secure, transparent supply chains.
🗓 calendar.google.com/calendar/eve...
Find out how Ecma and OWASP are creating practical solutions for secure, transparent supply chains.
🗓 calendar.google.com/calendar/eve...
3 reasons to join Code & Compliance Community Day!
1️⃣ Understand how the #CRA is being implemented.
2️⃣ Learn how the ORCWG is translating policy into practice.
3️⃣ Access resources and connect with others, navigating CRA compliance.
See you in October! www.eclipse-foundation.events/event/Code-a...
1️⃣ Understand how the #CRA is being implemented.
2️⃣ Learn how the ORCWG is translating policy into practice.
3️⃣ Access resources and connect with others, navigating CRA compliance.
See you in October! www.eclipse-foundation.events/event/Code-a...
August 19, 2025 at 8:03 AM
3 reasons to join Code & Compliance Community Day!
1️⃣ Understand how the #CRA is being implemented.
2️⃣ Learn how the ORCWG is translating policy into practice.
3️⃣ Access resources and connect with others, navigating CRA compliance.
See you in October! www.eclipse-foundation.events/event/Code-a...
1️⃣ Understand how the #CRA is being implemented.
2️⃣ Learn how the ORCWG is translating policy into practice.
3️⃣ Access resources and connect with others, navigating CRA compliance.
See you in October! www.eclipse-foundation.events/event/Code-a...
The #CRA is facing mounting criticism from industry stakeholders, with some describing the situation as a “five‑alarm fire": redmonk.com/sogrady/2025...
Many unresolved questions raised by the CRA are being addressed at the ORC's FAQ: github.com/orcwg/cra-hu...
Many unresolved questions raised by the CRA are being addressed at the ORC's FAQ: github.com/orcwg/cra-hu...
August 16, 2025 at 10:28 AM
The #CRA is facing mounting criticism from industry stakeholders, with some describing the situation as a “five‑alarm fire": redmonk.com/sogrady/2025...
Many unresolved questions raised by the CRA are being addressed at the ORC's FAQ: github.com/orcwg/cra-hu...
Many unresolved questions raised by the CRA are being addressed at the ORC's FAQ: github.com/orcwg/cra-hu...
💬 There are still many unanswered questions in the #CRAFAQ, and your input can help shape the conversation.
📢 Join the discussion:
1️⃣ Review the FAQ on GitHub: github.com/orcwg/cra-hu...
2️⃣ Share your perspectives and contribute directly to the conversations.
📢 Join the discussion:
1️⃣ Review the FAQ on GitHub: github.com/orcwg/cra-hu...
2️⃣ Share your perspectives and contribute directly to the conversations.
August 15, 2025 at 10:26 AM
💬 There are still many unanswered questions in the #CRAFAQ, and your input can help shape the conversation.
📢 Join the discussion:
1️⃣ Review the FAQ on GitHub: github.com/orcwg/cra-hu...
2️⃣ Share your perspectives and contribute directly to the conversations.
📢 Join the discussion:
1️⃣ Review the FAQ on GitHub: github.com/orcwg/cra-hu...
2️⃣ Share your perspectives and contribute directly to the conversations.
#ORCWG is gaining momentum with the creation of our inventory of #CRA resources and the addition of several new members. Read our news release: newsroom.eclipse.org/news/announc...
#CyberResilienceAct
#CyberResilienceAct
August 14, 2025 at 6:49 PM
#ORCWG is gaining momentum with the creation of our inventory of #CRA resources and the addition of several new members. Read our news release: newsroom.eclipse.org/news/announc...
#CyberResilienceAct
#CyberResilienceAct
We’re pleased to share that Open Forum Europe will have a co-located workshop “Solving the Standardisation Dilemma” at the Code & Compliance Community Day, bringing fresh perspectives to one of the sector’s most pressing challenges.
🔗 Register now! www.eclipse-foundation.events/event/Code-a...
🔗 Register now! www.eclipse-foundation.events/event/Code-a...
August 13, 2025 at 8:32 AM
We’re pleased to share that Open Forum Europe will have a co-located workshop “Solving the Standardisation Dilemma” at the Code & Compliance Community Day, bringing fresh perspectives to one of the sector’s most pressing challenges.
🔗 Register now! www.eclipse-foundation.events/event/Code-a...
🔗 Register now! www.eclipse-foundation.events/event/Code-a...
📢 New on the ORC website!
Stay informed with the latest insights on #opensource and regulatory #compliance.
The ORC blog features updates, perspectives, and practical guidance from across the community, helping you navigate compliance in a fast-evolving landscape.
🔍 orcwg.org/blog/
Stay informed with the latest insights on #opensource and regulatory #compliance.
The ORC blog features updates, perspectives, and practical guidance from across the community, helping you navigate compliance in a fast-evolving landscape.
🔍 orcwg.org/blog/
August 12, 2025 at 10:27 AM
📢 New on the ORC website!
Stay informed with the latest insights on #opensource and regulatory #compliance.
The ORC blog features updates, perspectives, and practical guidance from across the community, helping you navigate compliance in a fast-evolving landscape.
🔍 orcwg.org/blog/
Stay informed with the latest insights on #opensource and regulatory #compliance.
The ORC blog features updates, perspectives, and practical guidance from across the community, helping you navigate compliance in a fast-evolving landscape.
🔍 orcwg.org/blog/
👀 Are you interested in the CRA? Here are 4 events you can’t miss!
1️⃣ Comply.Land | 11-12 Sept: comply.land
2️⃣ The Things Conference | 23-24 Sept: www.thethingsconference.com
3️⃣ NSSS | 1-3 Oct: nsss.se/y2025/
4️⃣ Code & Compliance | 22-23 Oct: www.eclipse-foundation.events/event/Code-a...
1️⃣ Comply.Land | 11-12 Sept: comply.land
2️⃣ The Things Conference | 23-24 Sept: www.thethingsconference.com
3️⃣ NSSS | 1-3 Oct: nsss.se/y2025/
4️⃣ Code & Compliance | 22-23 Oct: www.eclipse-foundation.events/event/Code-a...
August 7, 2025 at 10:11 AM
👀 Are you interested in the CRA? Here are 4 events you can’t miss!
1️⃣ Comply.Land | 11-12 Sept: comply.land
2️⃣ The Things Conference | 23-24 Sept: www.thethingsconference.com
3️⃣ NSSS | 1-3 Oct: nsss.se/y2025/
4️⃣ Code & Compliance | 22-23 Oct: www.eclipse-foundation.events/event/Code-a...
1️⃣ Comply.Land | 11-12 Sept: comply.land
2️⃣ The Things Conference | 23-24 Sept: www.thethingsconference.com
3️⃣ NSSS | 1-3 Oct: nsss.se/y2025/
4️⃣ Code & Compliance | 22-23 Oct: www.eclipse-foundation.events/event/Code-a...
🔍 Do you need guidance navigating the Cyber Resilience Act (#CRA)?
Join us for the Code & Compliance Community Day on 22–23 October in Brussels!
🔗 www.eclipse-foundation.events/event/Code-a...
Join us for the Code & Compliance Community Day on 22–23 October in Brussels!
🔗 www.eclipse-foundation.events/event/Code-a...
August 6, 2025 at 11:48 AM
🔍 Do you need guidance navigating the Cyber Resilience Act (#CRA)?
Join us for the Code & Compliance Community Day on 22–23 October in Brussels!
🔗 www.eclipse-foundation.events/event/Code-a...
Join us for the Code & Compliance Community Day on 22–23 October in Brussels!
🔗 www.eclipse-foundation.events/event/Code-a...