BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//pretalx.com//open-source-conference-luxembourg-2026//sp
 eaker//9LSUUD
BEGIN:VTIMEZONE
TZID:Europe/Luxembourg
BEGIN:DAYLIGHT
DTSTART:20251007T000000
TZNAME:CEST
TZOFFSETFROM:+0200
TZOFFSETTO:+0200
END:DAYLIGHT
BEGIN:STANDARD
DTSTART:20251026T030000
RDATE:20261025T030000
TZNAME:CET
TZOFFSETFROM:+0200
TZOFFSETTO:+0100
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20260329T030000
RDATE:20270328T030000
TZNAME:CEST
TZOFFSETFROM:+0100
TZOFFSETTO:+0200
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
SUMMARY:The Cyber Resilience Act and Open Source: where do we stand? Libre
 Office's conformity journey as a working example - Benjamin JEAN
DTSTART;TZID=Europe/Luxembourg:20261007T143000
DTEND;TZID=Europe/Luxembourg:20261007T150000
DTSTAMP:20260916T160723Z
UID:pretalx-open-source-conference-luxembourg-2026-KPG9FJ@pretalx.com
DESCRIPTION:Where does the Cyber Resilience Act leave Open Source projects
 ? The first obligations for manufacturers apply from 11 September 2026: ac
 tively exploited vulnerabilities and severe incidents must be reported\, w
 ith an early warning at 24 hours and a notification at 72 hours. Article 2
 4(3) extends part of this to Open Source stewards\, the Regulation's new c
 ategory for foundations\, but only where they take part in development or 
 host its infrastructure. The Regulation applies in full\, with a declarati
 on of conformity and CE marking\, from 11 December 2027.\n\nThe first part
  is a state of play for Open Source: who is in scope\, how the commercial 
 activity test works\, and where manufacturers\, stewards and contributors 
 sit\; what the Commission's guidance of 27 July 2026 settled\; what the im
 plementing regulation on important and critical products changed through i
 ts core functionality test\; and what remains open while no harmonised sta
 ndard is cited in the Official Journal\, leaving no presumption of conform
 ity.\n\nThe second part puts this into practice with The Document Foundati
 on\, which aims for the most demanding level of conformity for LibreOffice
  and treats its own status\, whether manufacturer\, steward or distributor
 \, as something to establish rather than assume. We will walk through the 
 work done with inno³ since spring 2026: Articles 13 and 14\, the Annex I 
 essential requirements\, the Annex VII technical documentation\, the resul
 ting gap analysis and where TDF stands today. Reusable material will feed 
 the next CRA and Open Source guide from inno³ and the CNLL.
LOCATION:Governance\, compliance and business
URL:https://pretalx.com/open-source-conference-luxembourg-2026/talk/KPG9FJ
 /
END:VEVENT
END:VCALENDAR