CRA, NIS2, DORA: What senior Java engineers must deliver before 2027

This talk explores the implications of upcoming EU regulations, specifically the Cyber Resilience Act (CRA), NIS2, DORA, and the AI Act, for senior Java engineers. Recorded at the Open Community Experience 2026, the session emphasizes that compliance has transitioned from a legal concern to a developer responsibility, outlining essential requirements such as secure-by-design development, vulnerability management, and the necessity of Software Bills of Materials (SBOMs). The speakers, Ixchel Ruiz and Markus Schlichting from Karakun AG, discuss how these regulations introduce new obligations for developers, including long-term software maintenance and changes to development workflows. The session ultimately positions regulation as both a challenge and an opportunity to enhance software quality and reliability.