EU Cyber Resilience Act: Is Your Software Compliant? (2026 State of Open Source Report)
What does the EU Cyber Resilience Act (CRA) mean for open source software, software supply chain security, and regulatory compliance?
In this clip from the 2026 State of Open Source Report webinar, experts discuss how the European Union's Cyber Resilience Act (CRA) is reshaping software security requirements for organizations that develop, distribute, and integrate software products. The panel explores why the CRA is one of the most significant regulatory developments affecting the software industry and how it impacts both commercial software vendors and the open source ecosystem.
The discussion covers key CRA requirements, including vulnerability reporting processes, software security obligations, support lifecycle expectations, and due diligence for open source components. The panel also examines how open source foundations and community organizations are collaborating to strengthen open source supply chain security, improve compliance readiness, and help manufacturers meet emerging regulatory standards.
Featuring perspectives from the Eclipse Foundation and Perforce OpenLogic, this conversation highlights how the open source community is taking a leadership role in addressing software security and compliance challenges that affect organizations worldwide.
Key Topics Discussed
- The EU Cyber Resilience Act (CRA) explained
- How the CRA impacts open source software
- Open source supply chain security
- Vulnerability reporting and remediation requirements
- Software compliance and regulatory readiness
- Managing security risks in open source components
- Due diligence for software manufacturers
- Secure software development practices
- Open source governance and ecosystem collaboration
- Lessons from GDPR and emerging cybersecurity regulations
- Key compliance findings from the 2026 State of Open Source Report
Featured Speakers
Gaël Blondelle, Eclipse Foundation
Matthew Weier O'Phinney, Perforce OpenLogic
Why This Matters
As governments around the world introduce new software security regulations, organizations must understand how open source components fit into compliance frameworks. The Cyber Resilience Act is expected to influence software security practices far beyond Europe, making it an important topic for developers, engineering leaders, security teams, compliance professionals, and software vendors.
About the 2026 State of Open Source Report
The State of Open Source Report provides annual insights into the technologies, risks, compliance requirements, and trends influencing enterprise open source adoption. The report helps organizations understand how peers are addressing security, sustainability, governance, and software supply chain challenges in today's rapidly evolving technology landscape.
Watch the full webinar to learn how regulatory changes are shaping the future of open source software and cybersecurity: https://ter.li/k4529wko
Download the report: https://ter.li/xqh0id1h
#CyberResilienceAct #CRA #OpenSourceSecurity #SoftwareSupplyChain #SoftwareCompliance #Cybersecurity #OpenSource #EnterpriseOpenSource #SupplyChainSecurity #DevSecOps #CyberResilience #OpenSourceGovernance #EclipseFoundation #OpenLogic #StateOfOpenSource