Overview
In light of upcoming new EU software regulations, in particular the Cyber Resilience Act (CRA), OpenSSF will host a 60-minute interactive session to simulate a security incident response to achieve a few goals:
- Provide a playbook for maintainers, contributors, and open source consumers to adopt and customize to start running their own Tabletop Exercise (TTX) and improve their incident response and overall security posture.
- Promote closer collaboration among open source maintainers, consumers, public sectors, and private sectors on vulnerability management, intelligence sharing and incident response.
- Provide education for developers who are learning security.
- Demonstrate how current OpenSSF technologies may be helpful during a security incident.
Session attendees will actively engage in the exercise by bringing their expertise in open software security ranging from open source production, distribution, consumption, vulnerability disclosure and management to incident response.
