Using Security as Code to Survive the Cybersecurity Compliance Tsunami in Software Projects

Learn how software development teams can navigate the complex landscape of EU cybersecurity regulations and standards in this 36-minute conference talk. Gain insights into the practical implications of the Cyber Resilience Act, NIS2 directive, ISO 27001, and IEC 62443-4-1 for software teams. Explore why implementing these regulations can be challenging and resource-intensive, particularly for open-source projects. Discover automated approaches to cybersecurity compliance through code-like management, including detailed examples of the Open Policy Agent, NIST OSCAL ecosystem, and a speaker-founded open-source project. Perfect for software developers, open-source contributors, product owners, and project leaders, with no prior cybersecurity knowledge required.