[{"data":1,"prerenderedAt":597},["ShallowReactive",2],{"site:settings":3,"site:navigation":51,"site:footer":128,"sections:\u002Ftraining":190,"newsroom:banner:orc":9,"page:\u002Ftraining":191,"feed:\u002Ftraining":94,"fragment:collaborate-with-us":536},{"id":4,"title":5,"callForAction":6,"cookieBanner":9,"description":10,"extension":11,"featuredContentPublishTarget":12,"heroImage":13,"keywords":14,"logo":20,"logoInverse":9,"logoWidth":21,"meta":22,"search":23,"seoTitleSuffix":27,"skipLinkText":28,"socialImage":29,"socials":32,"stem":49,"__hash__":50},"settings\u002Fdata\u002Fsettings.yml","Open Regulatory Compliance Working Group",{"text":7,"href":8},"Get involved","\u002Fparticipate\u002F",null,"The open source community is collaborating to establish common specifications for secure software development based on open source best practices.","yml","orc","\u002Fimages\u002Fhero\u002Fdefault.jpg",[15,16,17,18,19],"regulatory compliance","cybersecurity processes","royalty-free patent licence","open source community collaboration","Eclipse Foundation Specification Process","\u002Fimages\u002Forc-logo.png",120,{},{"label":24,"placeholder":25,"menuLabel":26},"Search","Search the site…","Menu"," | Open Regulatory Compliance Working Group","Skip to main content",{"backgroundImage":30,"eyebrow":31},"\u002Fimages\u002Fog\u002Fbackground.jpg","orcwg.org",[33,37,41,45],{"name":34,"icon":35,"url":36},"LinkedIn","fa6-brands:linkedin-in","https:\u002F\u002Fwww.linkedin.com\u002Fshowcase\u002Fopen-regulatory-compliance\u002F",{"name":38,"icon":39,"url":40},"YouTube","fa6-brands:youtube","https:\u002F\u002Fwww.youtube.com\u002F@ORCWG",{"name":42,"icon":43,"url":44},"Bluesky","fa6-brands:bluesky","https:\u002F\u002Fbsky.app\u002Fprofile\u002Forcwg.org",{"name":46,"icon":47,"url":48},"Mastodon","fa6-brands:mastodon","https:\u002F\u002Ffosstodon.org\u002F@orcwg","data\u002Fsettings","iqJrJNmDNtN8-TkFCgBoO4uPvPJ_weRDDZ6KgK5ttNE",{"id":52,"extension":11,"main":53,"meta":125,"stem":126,"__hash__":127},"navigation\u002Fdata\u002Fnavigation.yml",[54,72,84,101],{"text":55,"children":56},"About",[57,60,63,66,69],{"text":58,"href":59},"ORC Working Group","\u002Fabout\u002F",{"text":61,"href":62},"Cyber Resilience SIG","\u002Fspecial-interest-groups\u002Fcyber-resilience\u002F",{"text":64,"href":65},"AI Policy & Compliance SIG","\u002Fspecial-interest-groups\u002Fai-policy-and-compliance\u002F",{"text":67,"href":68},"Steering Committee","\u002Fcommittees\u002Fsteering-committee\u002F",{"text":70,"href":71},"Meeting Minutes","\u002Fcommittees\u002Fminutes\u002F",{"text":73,"children":74},"Membership",[75,78,81],{"text":76,"href":77},"Our Members","\u002Fmembership\u002F",{"text":79,"href":80},"Become a Member","\u002Fmembership\u002Fbecome-a-member\u002F",{"text":82,"href":83},"Participation and Membership FAQ","\u002Fabout\u002Fparticipation-and-membership-faq\u002F",{"id":85,"text":86,"children":87},"cra","Cyber Resilience Act",[88,91,95,98],{"text":89,"href":90},"About CRA","\u002Fcra\u002Fabout",{"text":92,"href":93,"external":94},"CRA FAQ","https:\u002F\u002Fcra.orcwg.org\u002F",true,{"text":96,"href":97},"CRA Resources","\u002Fcra\u002Fresources",{"text":99,"href":100,"external":94},"CRA Hub on GitHub","https:\u002F\u002Fgithub.com\u002Forcwg\u002Fcra-hub",{"text":102,"children":103},"Resources",[104,107,110,113,116,119,122],{"text":105,"href":106},"Events","\u002Fevents\u002F",{"text":108,"href":109},"Community Calendar","\u002Fresources\u002Fcalendar\u002F",{"text":111,"href":112},"Blog","\u002Fblog\u002F",{"text":114,"href":115},"Videos","\u002Fresources\u002Fvideos\u002F",{"text":117,"href":118},"Learning Hub","\u002Ftraining\u002F",{"text":120,"href":121},"Marketing Resources","\u002Fresources\u002Fmarketing-resources\u002F",{"text":123,"href":124,"external":94},"ORC Store","https:\u002F\u002Feclipse-foundation.store\u002Fcollections\u002Fopen-regulatory-compliance-orc",{},"data\u002Fnavigation","XYDVypNX67n8V4VQI_JTrw0cI16uV5jtctVXjN-DeKo",{"id":129,"backToTopText":130,"callToAction":9,"colorMode":9,"copyright":131,"description":9,"extension":11,"manageCookiesText":132,"meta":133,"sections":134,"socialsHeading":187,"stem":188,"__hash__":189},"footer\u002Fdata\u002Ffooter.yml","Back to the top","Copyright © Eclipse Foundation AISBL. All Rights Reserved.","Manage Cookies",{},[135,152,171],{"id":136,"heading":137,"links":138},"footer-eclipse-foundation","Eclipse Foundation",[139,141,144,147,149],{"text":55,"href":140},"https:\u002F\u002Fwww.eclipse.org\u002Forg\u002F",{"text":142,"href":143},"Projects","https:\u002F\u002Fprojects.eclipse.org\u002F",{"text":145,"href":146},"Collaborations","https:\u002F\u002Fwww.eclipse.org\u002Fcollaborations\u002F",{"text":73,"href":148},"https:\u002F\u002Fwww.eclipse.org\u002Fmembership\u002F",{"text":150,"href":151},"Sponsor","https:\u002F\u002Fwww.eclipse.org\u002Fsponsor\u002F",{"id":153,"heading":154,"showManageCookies":94,"links":155},"footer-legal","Legal",[156,159,162,165,168],{"text":157,"href":158},"Privacy Policy","https:\u002F\u002Fwww.eclipse.org\u002Flegal\u002Fprivacy\u002F",{"text":160,"href":161},"Terms of Use","https:\u002F\u002Fwww.eclipse.org\u002Flegal\u002Fterms-of-use\u002F",{"text":163,"href":164},"Compliance","https:\u002F\u002Fwww.eclipse.org\u002Flegal\u002Fcompliance\u002F",{"text":166,"href":167},"Code of Conduct","https:\u002F\u002Fwww.eclipse.org\u002Forg\u002Fdocuments\u002FCommunity_Code_of_Conduct.php",{"text":169,"href":170},"Legal Resources","https:\u002F\u002Fwww.eclipse.org\u002Flegal\u002F",{"id":172,"heading":173,"links":174},"footer-more","More",[175,178,181,184],{"text":176,"href":177},"Report a Vulnerability","https:\u002F\u002Fwww.eclipse.org\u002Fsecurity\u002F",{"text":179,"href":180},"Service Status","https:\u002F\u002Fstatus.eclipse.org\u002F",{"text":182,"href":183},"Contact Us","https:\u002F\u002Fwww.eclipse.org\u002Forg\u002Ffoundation\u002Fcontact.php",{"text":185,"href":186},"Support","https:\u002F\u002Fwww.eclipse.org\u002Fprojects\u002Fsupport\u002F","Follow Us:","data\u002Ffooter","hysVbukIYO6sJMzwzramCt7SpkkTNrrGCAP94Td1geE",[],{"id":192,"title":193,"aliases":9,"body":194,"breadcrumbTitle":9,"breadcrumbs":523,"date":524,"description":525,"extension":526,"featuredFooter":523,"header":9,"keywords":9,"meta":527,"navigation":94,"path":528,"redirectUrl":9,"rssFeed":529,"seo":530,"seoTitle":531,"socialImage":9,"stem":532,"typography":533,"visibility":9,"width":534,"__hash__":535},"pages\u002Ftraining.md","ORC Learning Hub",{"type":195,"value":196,"toc":516},"minimark",[197,257,412,429,482,512],[198,199,201,213,220,227,232,243],"page-hero-split",{"size":200},"small",[202,203,204,205,208,209,212],"p",{},"The ",[206,207,193],"strong",{}," provides the first ",[206,210,211],{},"practical, open source-focused training"," to help you understand how the CRA applies in real-world scenarios and what actions you need to take.",[202,214,215,216,219],{},"Developed by the ORC Working Group, this training delivers ",[206,217,218],{},"real-world, role-specific guidance"," to help you prepare with confidence.",[221,222,224],"template",{"v-slot:eyebrow":223},"",[202,225,226],{},"ORC learning hub",[221,228,229],{"v-slot:title":223},[202,230,231],{},"Understand the EU Cyber Resilience Act (CRA) and what it means for open source",[221,233,234],{"v-slot:actions":223},[235,236,240],"button-link",{"color":237,"href":238,"size":239},"secondary","https:\u002F\u002Feclipse-training.org\u002Fcourses","responsive",[202,241,242],{},"Start free training",[221,244,245],{"v-slot:aside":223},[246,247,250],"media",{"corners":248,"ratio":249},"medium","4:3",[202,251,252],{},[253,254],"img",{"alt":255,"src":256},"Training participants collaborating at a conference","\u002Ftraining\u002Fimages\u002Fhero.webp",[258,259,265,402,407],"page-section",{"spacingBottom":260,"spacingTop":260,"titleStyle":261,"typography":262,"background":263,"titleAlign":264},"x-large","heading","editorial","white-to-light-teal","center-wide",[266,267,270,342],"grid",{"columns":268,"gap":269},"2","large",[271,272,274,279,285,288,293,312,317,333],"card",{"layout":273,"padding":269},"stack",[275,276,278],"h3",{"id":277},"i-contribute-to-or-maintain-open-source","I contribute to or maintain open source",[280,281,282],"badge",{},[202,283,284],{},"Start with",[202,286,287],{},"Introduction to the CRA for the Open Source Community",[280,289,290],{},[202,291,292],{},"Designed for",[294,295,296],"styled-list",{},[297,298,299,303,306,309],"ul",{},[300,301,302],"li",{},"Developers",[300,304,305],{},"Maintainers",[300,307,308],{},"Contributors",[300,310,311],{},"Open source project stewards",[280,313,314],{},[202,315,316],{},"You’ll learn",[294,318,319],{},[297,320,321,324,327,330],{},[300,322,323],{},"How the CRA applies to open source projects",[300,325,326],{},"The role of open source vs. manufacturers",[300,328,329],{},"Key concepts like vulnerability handling and SBOMs",[300,331,332],{},"What “secure by design” means in an open source context",[273,334,336],{"align":335},"center",[235,337,339],{"color":237,"href":338,"size":239},"https:\u002F\u002Feclipse-training.org\u002Fcourses\u002Fcourse-v1:ORC+CRA+2026\u002Fabout",[202,340,341],{},"Start this ✨free✨ course",[271,343,344,348,352,355,359,375,379,395],{"layout":273,"padding":269},[275,345,347],{"id":346},"i-manufacture-products-using-open-source","I manufacture products using open source",[280,349,350],{},[202,351,284],{},[202,353,354],{},"Introduction to the CRA for Manufacturers",[280,356,357],{},[202,358,292],{},[294,360,361],{},[297,362,363,366,369,372],{},[300,364,365],{},"Product teams",[300,367,368],{},"Security & compliance professionals",[300,370,371],{},"OSPO leaders",[300,373,374],{},"Legal and regulatory teams",[280,376,377],{},[202,378,316],{},[294,380,381],{},[297,382,383,386,389,392],{},[300,384,385],{},"CRA obligations for manufacturers",[300,387,388],{},"Organisational responsibilities and risk",[300,390,391],{},"Supply chain accountability",[300,393,394],{},"Security-by-design expectations and compliance context",[273,396,397],{"align":335},[235,398,400],{"color":237,"href":399,"size":239},"https:\u002F\u002Feclipse-training.org\u002Fcourses\u002Fcourse-v1:ORC-Learning-Hub+LH102+CRA-2026-manufacturers\u002Fabout",[202,401,341],{},[221,403,404],{"v-slot:title":223},[202,405,406],{},"Start with the right course for you",[221,408,409],{"v-slot:intro":223},[202,410,411],{},"Two introductory modules are now available. Choose the one that best matches your role:",[258,413,416,424],{"spacingBottom":260,"spacingTop":260,"titleStyle":261,"typography":262,"background":414,"titleAlign":415},"light-teal","center-narrow",[246,417,420],{"corners":248,"decoration":418,"spacing":419},"bubbles","none",[421,422],"youtube",{"id":423,"thumbnail":269},"s8ehV6jc-dg",[221,425,426],{"v-slot:title":223},[202,427,428],{},"What the open source community is saying",[258,430,434,439,442,445,456,463,467,479],{"spacingBottom":260,"spacingTop":260,"titleStyle":261,"typography":262,"background":431,"asideImage":432,"decoration":433},"light-teal-to-white","\u002Ftraining\u002Fimages\u002Fcra-enforcement.webp","bubbles-side",[435,436,438],"h2",{"id":437},"with-cra-enforcement-approaching-now-is-the-time-to-prepare","With CRA enforcement approaching, now is the time to prepare",[202,440,441],{},"With CRA obligations coming into effect in September 2026, organisations and open source communities must move quickly from awareness to action.",[202,443,444],{},"This training helps you:",[297,446,447,450,453],{},[300,448,449],{},"Move from awareness to action",[300,451,452],{},"Understand your specific responsibilities",[300,454,455],{},"Prepare for real-world implementation",[202,457,458,459,462],{},"It is the ",[206,460,461],{},"first community-developed, practical guidance"," focused specifically on open source and the CRA.",[275,464,466],{"id":465},"coming-soon-modules-3-5","Coming soon: modules 3-5",[297,468,469,472],{},[300,470,471],{},"Deep dives on SBOMs, due diligence, and vulnerability management.",[300,473,474,475,478],{},"Learners will have the option to complete an assessment to earn a ",[206,476,477],{},"CRA & Open Source certification badge",".",[202,480,481],{},"Stay tuned for updates as we roll out additional modules. Learners from modules 1 and 2 will receive recommendations on what to take next based on your role.",[258,483,484],{"spacingBottom":260,"spacingTop":248,"titleStyle":261,"typography":262},[271,485,487,495,498],{"variant":486},"promo-large",[435,488,490,491,494],{"id":489},"join-the-orc-learning-hub","Join the ",[492,493],"br",{}," ORC Learning Hub",[202,496,497],{},"Stay informed as new modules are released and guidance evolves.",[273,499,500,505],{"gap":248,"spacing-top":248},[235,501,502],{"color":237,"href":338,"size":239},[202,503,504],{},"Start the course",[235,506,509],{"color":237,"href":507,"size":239,":newTab":508},"https:\u002F\u002F38167.share.hsforms.com\u002F2yHHxUOePRuyspFm0Oixn9g","true",[202,510,511],{},"Sign up for updates",[513,514],"page-content-fragment",{"name":515},"collaborate-with-us",{"title":223,"searchDepth":517,"depth":517,"links":518},2,[519],{"id":437,"depth":517,"text":438,"children":520},[521],{"id":465,"depth":522,"text":466},3,"hidden","2026-05-11","Learn how the EU Cyber Resilience Act impacts open source software. Practical, role-based CRA training to help you understand requirements and take action.","md",{},"\u002Ftraining","always",{"title":193,"description":525},"EU Cyber Resilience Act (CRA) Training for Open Source | ORC Learning Hub","training","large-headings","full","XbqYIGzTVhFcyhx4Orptn0SX4ZiSLNECaRtzcCRhe4o",{"id":537,"title":538,"body":539,"description":9,"extension":526,"meta":592,"navigation":94,"path":593,"seo":594,"stem":595,"__hash__":596},"fragments\u002Ffragments\u002Fcollaborate-with-us.md","Collaborate with us",{"type":195,"value":540,"toc":590},[541],[258,542,544,569,573,578],{"anchor":515,"background":543,"textAlign":335,"titleAlign":335,"titleStyle":269},"fade",[545,546,547],"scrolling-carousel",{"width":534},[202,548,549,553,557,561,565],{},[253,550],{"alt":551,"src":552},"Members of the ORC community collaborating around a whiteboard.","\u002Fimages\u002Fcollaborate\u002Fcollab-1.webp",[253,554],{"alt":555,"src":556},"A speaker from the Eclipse Foundation welcoming an audience to the Code and Compliance Community Day.","\u002Fimages\u002Fcollaborate\u002Fcollab-2.webp",[253,558],{"alt":559,"src":560},"People navigating through the Code and Compliance event.","\u002Fimages\u002Fcollaborate\u002Fcollab-3.webp",[253,562],{"alt":563,"src":564},"An ORC booth where two people are talking to each other.","\u002Fimages\u002Fcollaborate\u002Fcollab-4.webp",[253,566],{"alt":567,"src":568},"A room full of people listening to a public speaker.","\u002Fimages\u002Fcollaborate\u002Fcollab-5.webp",[221,570,571],{"v-slot:title":223},[202,572,538],{},[221,574,575],{"v-slot:intro":223},[202,576,577],{},"The Open Regulatory Compliance (ORC) Working Group is a neutral forum for the open source community — including foundations, maintainers, vendors, users, package managers, among others — and the broader software industry to facilitate CRA compliance.",[221,579,580,585],{"v-slot:actions":223},[235,581,582],{"color":237,"href":80,"size":239},[202,583,584],{},"Join the working group",[235,586,587],{"color":237,"href":8,"size":239},[202,588,589],{},"Participate",{"title":223,"searchDepth":517,"depth":517,"links":591},[],{},"\u002Ffragments\u002Fcollaborate-with-us",{"title":538},"fragments\u002Fcollaborate-with-us","5iWMh2-AY0aNM8bMX3fRJdugxx2S1Q8hZDzDYzE3eEE",1794412144532]