All Things Open RTP Meetup

We're back to in-person meetups following the uber-successful All Things AI event we co-hosted March 23 & 24!

The topic and speaker are super interesting to us and should deliver a ton of value and education to everyone in attendance.

The topic - What Enterprises Look for in OSS Under the EU Cyber Resilience Act — and How Maintainers Can Deliver It, is important because many companies in the RTP and surrounding areas, and in our community, offer software products that no longer stay within the U.S. market, especially in the open source ecosystem. And because the EU Cyber Resilience Act makes cybersecurity a legal requirement, the penalty for non-compliance can be severe.

The speaker, Dr. Lisa Bradley, is a distinguished cybersecurity expert and visionary leader, currently serving as the Senior Director of Product & Application Security at Dell Technologies.

Start Time:

• Doors open at 6:00 pm for networking, food and beverages, and (free) swag
• Live programming begins at 6:30 pm sharp

Location:
Wake Technical Community College - RTP Campus
10908 Chapel Hill Rd.
Morrisville, NC 27560
*We'll be in the auditorium, which is located in building RT1, room 162. Enter through the side entrance - we'll be there to guide you along.

Cost: FREE, as always

Topic:
What Enterprises Look for in OSS Under the EU Cyber Resilience Act — and How Maintainers Can Deliver It
Subtitle: Turning EU Cyber Resilience Act requirements into actionable guidance for open-source maintainers.

Abstract:
The EU Cyber Resilience Act (CRA) introduces mandatory cybersecurity requirements for hardware and software “products with digital elements” sold in the EU, including lifecycle‑long obligations for secure design, vulnerability handling, and timely security updates. While non‑commercial open‑source software (OSS) is exempt in some scenarios, OSS that is integrated into commercial products—or forms part of a connected system—can still impact a company’s compliance obligations. As a result, OSS projects increasingly influence whether downstream manufacturers can meet CRA requirements.

This session explains what big enterprises now look for when selecting OSS under the CRA, including clear vulnerability reporting practices, transparent support expectations, and evidence of secure development. It outlines how companies are building trustworthiness scoring models to evaluate OSS components, identify projects that fall outside acceptable risk thresholds, and decide when to invest, mitigate, or replace them. Most importantly, maintainers will learn the practical steps they can take—without becoming full‑time compliance teams—to make their projects the trusted, low‑friction choice for corporations operating under the CRA.