August Office Hours: Staying Compliant with the Cyber Resilience Act
In December of 2024, the EU’s Cyber Resilience Act (CRA) went into effect, aimed at bolstering the security of many products and services. With this regulation comes new requirements for vulnerability management, SBOMs, and audits in which major violations could be upwards of €15M or 2.5% of global revenue. For any organizations doing business in Europe, there hasn’t been an implication this large since GDPR.
The CRA must be taken seriously, and as a result, it will shift the security landscape to put AppSec into the spotlight. At DefectDojo we’re excited to announce new enrichment support for KEV and enable AppSec teams to meet these new compliance standards.
In this office hours session, we’ll discuss:
What the Cyber Resilience Act is and how it will affect your security team
How to ensure compliance with vulnerability management
Utilizing DefectDojo’s new automatic KEV enrichment to help you stay compliant