The Cyber Resilience Act (CRA) is transforming how software is developed, distributed, and maintained across Europe, and its impact on open source is significant.
The ORC Learning Hub provides the first practical, open source-focused training to help you understand how the CRA applies in real-world scenarios and what actions you need to take.
Developed by the ORC Working Group, this training delivers real-world, role-specific guidance to help you prepare with confidence.
Two introductory modules are now available. Choose the one that best matches your role:
Introduction to the CRA for the Open Source Community
Introduction to the CRA for Manufacturers
With CRA obligations coming into effect in September 2026, organisations and open source communities must move quickly from awareness to action.
This training helps you:
It is the first community-developed, practical guidance focused specifically on open source and the CRA.
Stay tuned for updates as we roll out additional modules. Learners from modules 1 and 2 will receive recommendations on what to take next based on your role.
The Open Regulatory Compliance (ORC) Working Group is a neutral forum for the open source community — including foundations, maintainers, vendors, users, package managers, among others — and the broader software industry to facilitate CRA compliance.
