CRA Mondays | Unlocking Software Supply Chain Security: Updates from Ecma TC54 and OWASP

Описание: At the heart of the EU Cyber Resilience Act (CRA) and other emerging EU regulations lies a critical focus on supply chain security and Software Bill of Materials (SBOM). Ecma TC54, in collaboration with OWASP, is advancing this agenda through its work on “Software and system transparency.”

In this session, you will gain insights into key initiatives shaping the future of software transparency—from OWASP CycloneDX to new efforts around software identifiers (PURL), Common Lifecycle Enumeration (CLE), and the Transparency Exchange API (TEA) for automating the delivery of transparency artefacts across the supply chain.

The session will also provide an overview of Ecma International’s role as a global standards organisation. A Q&A segment will give you the chance to engage directly with experts on these critical CRA-related standards.

ABOUT ORC
Learn more & join the conversation: https://www.orcwg.org

TIMESTAMPS
00:05 – Introduction and welcome back to CRA Mondays
02:16 – ECMA perspective and standards work
08:33 – Introduction to Ecma TC54
11:03 – Task groups for TC54
15:34 – Smart cities use cases and sector perspectives
17:16 – Upcoming features
23:58 – Common Lifecycle Enumeration
28:48 – CL ratification process and future timeline
32:32 – Applying standards to software and systems
36:37 – Vulnerabilities, CVEs, and risk ranges
40:47 – Standardization discussions and clarifications
44:51 – Collaboration, acknowledgements, and wrap-up