Скачать или смотреть Why Do You Trust Software? Operationalizing CRA with the Eclipse Trustable Software Framework

Modern products—from cars and planes to medical devices and consumer gadgets—depend on millions of lines of software hidden deep inside. The EU Cyber Resilience Act (CRA) now requires manufacturers and suppliers to prove that this software is secure, maintained, and resilient over the long term. But while the CRA defines what must be achieved, the industry is still asking how.

The Eclipse Trustable Software Framework (TSF) may provide part of the answer. Built around six trustable tenets and exploring a FICO-style Trustable Score, TSF suggests a path for making software trust more measurable and auditable. In this session, we’ll discuss how TSF could complement CRA obligations, where it may help engineers, executives, and regulators, and why open collaboration is essential to shaping the future of trustable software.

Join us to learn, question, and contribute to this conversation.

ABOUT ORC
Learn more & join the conversation: https://www.orcwg.org

TIMESTAMPS
00:00 – Welcome and introduction to John Ellis

02:56 – Why do you trust software?

04:38 – Tested does not equal trustable

10:49 – Bigger picture: risk metrics and insurance implications

12:08 – Applying the trustable software framework to real cases

15:45 – Embedded systems and regulatory perspectives

21:29 – Audience Q&A

25:13 – Executive buy-in and communicating CRA concerns internally

28:19 – Lessons from customer experiences and multi-part responses

38:14 – Final questions and wrap-up