Exploring an Open Source Toolkit for SMEs to manage Cyber Resilience Act compliance - European DIGITAL SME Alliance

Exploring an Open Source Toolkit for SMEs to manage Cyber Resilience Act compliance

About the event

The Cyber Resilience Act will soon require manufacturers of products with digital elements – including many SMEs and open‑source projects – to demonstrate cybersecurity by design, manage vulnerabilities and document compliance. For smaller teams, understanding what this means in practice and which tools can help is often the biggest hurdle.

The OCCTET project has developed a toolkit to ensure that the opensource components within digital products are secure. This webinar from the OCCTET project focuses on what SMEs and open‑source users need to know: why support matters, how the toolkit can reduce the compliance burden, and how you can start using the tools in your own workflows.

Why this matters for SMEs and open-source users:

  • CRA obligations apply to you if you develop or place hardware or software products with digital elements on the EU market, regardless of company size.
  • Compliance is not just about policies: it covers secure development, vulnerability handling, SBOMs, documentation and post‑market monitoring.
  • SMEs and open‑source maintainers often lack dedicated compliance teams, so practical, low‑overhead tooling and guidance are essential to turn legal requirements into day‑to‑day practice.

How this webinar will help

This session introduces the OCCTET toolkit – a set of practical tools and guidance designed to help smaller organisations and open‑source projects work towards CRA readiness without needing large budgets or specialist consultants.

You will:

  • Understand what support is available and why tooling matters for realistic CRA implementation in SME and open-source contexts.
  • See the OCCTET toolkit in action: self-assessment, SBOM generation, vulnerability detection and related utilities.
    Hear real experiences from organisations that have tested the tools, including what helped, what was challenging and what they would do differently.
  • Learn where to access the tools, how to integrate them into existing workflows, and how they will remain available and supported after the webinar series ends.

Agenda

10:00 – 10:05

Introduction

  • James Philpot, Senior Project Manager (European DIGITAL SME Alliance)

10:05 – 10:15

Presentation of consortium and OCCTET goals

  • Sebastien Heurtematte, Security Software Engineer (ECLIPSE Foundation)

10:15 – 10:35

Presentation of the self-assessment

  • Andreea Galbau, EU funded research and innovation projects Coordinator (Expertware)

10:35 – 10:55

Presentation of the toolkit

  • Andreas Kotulla, Founder & CEO (Bitsea)
  • Sebastian Schuberth, Co-Founder & CTO/Martin von Willebrand, CEO (Double Open)

10:55 – 11:15

Toolkit in action

  • Bernd Prünster, Senior IT Security Expert (A-SIT Plus) (TBC)

11:15 – 11:25

What next for the OCCTET toolkit?

  • Sebastien Heurtematte, Security Software Engineer (ECLIPSE Foundation)

11:25 – 11:30

Q&A and closing

  • James Philpot, Senior Project Manager (European DIGITAL SME Alliance)

CONTACT US