Open source and standardisation: Necessary but at times challenging collaboration towards compliance

This talk features Timo Perälä from Nokia discussing the intersection of open source and standardization processes in light of the Cyber Resilience Act (CRA). It explores how open source communities can engage with regulatory bodies and the challenges they face, such as limited access to standardization and alignment issues. The session emphasizes the structural differences between the consensus-driven processes of formal standardization and the flexible nature of open source collaboration. Strategies for overcoming these challenges, including the formation of groups like the Eclipse Open Regulatory Compliance Working Group and OpenSSF initiatives, are also highlighted, underlining the importance of effective participation in developing implementable compliance standards that support open source practices.