Free and Open Source Tools for CRA Compliance and Software Supply Chain Security for SMEs

Learn how small and medium enterprises can enhance their cybersecurity posture and achieve CRA compliance through free and open source software solutions in this 31-minute conference talk. Explore practical approaches to software supply chain integrity and security management, focusing on accessible tools for vulnerability management, SBOM creation, and stakeholder communication. Discover how organizations without dedicated security teams or substantial budgets can efficiently monitor potential vulnerabilities, handle remediation actions, and meet emerging regulatory requirements using FOSS solutions. Gain insights from Eclipse Foundation and AboutCode experts on leveraging EU-funded projects to reduce cybersecurity risks in distributed software and devices while maintaining minimal operational friction and costs.