BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//Open Source Security Foundation - ECPv6.18.3//NONSGML v1.0//EN
CALSCALE:GREGORIAN
METHOD:PUBLISH
X-WR-CALNAME:Open Source Security Foundation
X-ORIGINAL-URL:https://openssf.org
X-WR-CALDESC:Events for Open Source Security Foundation
REFRESH-INTERVAL;VALUE=DURATION:PT1H
X-Robots-Tag:noindex
X-PUBLISHED-TTL:PT1H
BEGIN:VTIMEZONE
TZID:America/New_York
BEGIN:DAYLIGHT
TZOFFSETFROM:-0500
TZOFFSETTO:-0400
TZNAME:EDT
DTSTART:20250309T070000
END:DAYLIGHT
BEGIN:STANDARD
TZOFFSETFROM:-0400
TZOFFSETTO:-0500
TZNAME:EST
DTSTART:20251102T060000
END:STANDARD
BEGIN:DAYLIGHT
TZOFFSETFROM:-0500
TZOFFSETTO:-0400
TZNAME:EDT
DTSTART:20260308T070000
END:DAYLIGHT
BEGIN:STANDARD
TZOFFSETFROM:-0400
TZOFFSETTO:-0500
TZNAME:EST
DTSTART:20261101T060000
END:STANDARD
BEGIN:DAYLIGHT
TZOFFSETFROM:-0500
TZOFFSETTO:-0400
TZNAME:EDT
DTSTART:20270314T070000
END:DAYLIGHT
BEGIN:STANDARD
TZOFFSETFROM:-0400
TZOFFSETTO:-0500
TZNAME:EST
DTSTART:20271107T060000
END:STANDARD
END:VTIMEZONE
BEGIN:VEVENT
DTSTART;VALUE=DATE:20261105
DTEND;VALUE=DATE:20261201
DTSTAMP:20261105T135139Z
CREATED:20261105T131347Z
LAST-MODIFIED:20261105T135139Z
UID:10000171-1793836800-1796083199@openssf.org
SUMMARY:CFP OPEN FOSDEM 2027: Beyond the CRA – Building Secure and Resilient Open Source
DESCRIPTION:Last edition\, the CRA in Practice DevRoom at FOSDEM 2026 brought together developers\, maintainers\, stewards\, manufacturers\, security practitioners\, policymakers\, and standards contributors to move the conversation around the CRA from awareness to practical implementation.  \nThis year\, we want to build on that success with a DevRoom looking at cybersecurity policy and regulation from an open source perspective. While the CRA remains an important focus\, we welcome contributions on the wider cybersecurity policy landscape\, including NIS2\, DORA\, cybersecurity aspects of AI policy\, the Cyber Security Act\, technology sovereignty and cybersecurity\, and comparable cybersecurity initiatives from outside Europe. We particularly welcome practical perspectives from the US\, Japan\, South Korea\, and other regions. \nThe common theme is putting cybersecurity policy into practice. How can developers\, maintainers\, foundations\, manufacturers\, and security practitioners turn regulatory requirements and policy objectives into practical\, sustainable approaches to building and maintaining secure software? \nWe invite proposals for talks\, panels\, and workshops that share practical experience\, case studies\, tools\, standards\, lessons learned\, or new approaches. \nWe welcome proposals covering\, but not limited to: \n\nCRA in practice: implementation\, vulnerability handling\, reporting\, conformity assessment\, and lessons learned\nOpen source readiness: how projects\, maintainers\, stewards\, and manufacturers can address emerging requirements\nCybersecurity and AI: the EU AI Act\, Action Plan on Cybersecurity and Artificial Intelligence\, AI security\, and AI-assisted security\nCybersecurity aspects of the EU Tech Sovereignty Package and European Open Source Strategy: practical implications for software security\, resilience\, strategic dependencies\, trusted infrastructure\, and open source ecosystems\nGlobal perspectives: cybersecurity policy and implementation in the US\, UK\, Japan\, South Korea\, and other regions\nNIS2\, DORA\, CSA and other cybersecurity frameworks: practical implications for open source and software ecosystems\nPolicy interoperability: aligning requirements across different jurisdictions and frameworks\nTooling and engineering practices: open tools\, automation\, security processes\, documentation\, and workflows that help make cybersecurity requirements measurable and achievable \nCommunity and ecosystem approaches: how foundations\, stewards\, manufacturers\, researchers\, and governments can collaborate\nReal-world case studies: experiences implementing cybersecurity requirements across projects\, organizations\, and sectors\n\nWe are particularly interested in contributions that go beyond explaining policy and demonstrate what works in practice. If your session helps the open source community understand\, implement\, or challenge emerging cybersecurity requirements through concrete experience and open collaboration\, we would love to hear from you. \nSession Types and Lengths – please indicate your preferred format: \n\nLightning talks (10 minutes) – quick insights\, new ideas\, or focused demos\nStandard talks (20 minutes) – technical deep dives\, case studies\, or practical experiences\nPanels (30 minutes) – cross-role or cross-region discussions around a key challenge\n\nImportant dates: \n\n27 October – Call for proposals opened \n\nPlease note that speakers must be available to present their sessions in person.  \n\n30 November – Submission deadline\n5 December – Selected speakers notified\n7 December – Schedule published\nThis devroom will take place on Saturday\, 30 January\, in the morning\n\nWe would love to hear from you! Submit your proposal here https://pretalx.fosdem.org/fosdem-2027/cfp and make sure to select the “Beyond the CRA – Building Secure and Resilient Open Source” track \nAll participants must to follow the FOSDEM Code of Conduct https://fosdem.org/2027/practical/conduct/
URL:https://openssf.org/event/fosdem-2027-beyond-the-cra-building-secure-and-resilient-open-source/
CATEGORIES:Upcoming CFPs
END:VEVENT
END:VCALENDAR