The Cyber Resilience SIG is an active initiative within the Open Regulatory Compliance (ORC) Working Group. This SIG formalizes the working group’s ongoing efforts to help open source communities and the tech industry navigate cyber resilience regulations, including but not limited to the European Cyber Resilience Act (CRA).
Cyber resilience is a global concern, and while the CRA has been a major focus, this SIG will take a broader perspective, addressing regulations that impact open source communities worldwide. As new regulations emerge, the working group anticipates the formation of additional SIGs, modeled on this initiative.
Leads

Dirk-Willem van Gulik
VP of Public Policy, Apache Software

Timo Perala
Head of Software and Internet Standardisation, Nokia Networks
Who Should Join?
Participation in the Cyber Resilience SIG is open to all who are interested in shaping the discussion and contributing to industry-wide efforts to improve cyber resilience. Given the working group’s current priorities, it is expected that most existing members will engage with this SIG.
Get Involved
Interested in participating? As a member of ORC, you are welcome to join the Cyber Resilience SIG by engaging in discussions on the #cyber-resilience-sig Slack channel, contributing to related projects on GitHub, or starting a conversation on the ORC mailing list. Your insights and participation will help shape how open source projects navigate and comply with cyber resilience regulations.