Open Source Automation Development Lab (OSADL) eG

Die OSADL Community hat sich in den vergangenen Jahren intensiv mit den Anforderungen des CRA, insbesondere im Zusammenhang mit Open Source, auseinandergesetzt. Unsere bisherigen Erkenntnisse teilen wir auf dem Cyber Resilience Act Summit, der am 7. und 8. Juli in München stattfindet. OSADL ist mit einem Stand vertreten und mit einem Vortrag von Caren Kresse, der häufigen Fragen zum CRA aus der Praxis vorstellt und beantwortet. Wenn Sie den CRA Summit besuchen und sich über CRA-Policies, Best Practices oder den Einsatz von Open Source austauschen möchten, sprechen Sie uns gerne an. Wir freuen uns auf den persönlichen Austausch! Hier geht's zur Eventseite des Cyber Resilience Act Summit: https://lnkd.in/dDi7-qnr #cyberresilienceact #cyberresilience #cybersecurity #opensource #opensourcesoftware #FOSS #legalcompliance #security #CRA #SBOM #SPDX #embeddedsystems

Last week, our annual member event – the OSADL Networking Day 2026 – took place once again in Heidelberg. What a fantastic day packed with inspiring conversations, fresh ideas, and many familiar and new faces. A huge thank you to everyone who joined us and helped make the event such a vibrant forum for knowledge exchange within the OSADL community. This year's theme, "Spotlighting Regulatory and Functional Requirements on FOSS", brought together experts to share their knowledge on three key topics: CRA and Vulnerability Handling, Zephyr, and the FOSS Compliance Toolchain. The plenary talks in the morning laid the foundation for lively discussions, while the afternoon breakout sessions offered opportunities to explore various aspects of these topics in greater depth. Our sincere thanks go to all speakers and moderators for delivering outstanding presentations and fostering engaging discussions. The brainwork didn't stop when the conference sessions ended. The evening program challenged everyone in a different way: participants needed to team up to crack a cybercrime case during our Hacker Attack escape game. Fortunately, every successful cyber detective was rewarded afterwards with a well-deserved barbecue dinner. Hosting the Networking Day is always one of the highlights of our year. The event reminds us that Open Source is about much more than technology - it's about people, collaboration, and the exchange of ideas. We can't wait to continue the conversations and welcome you back to Heidelberg next year!

Dear community, we're glad to share that OSADL's 20 years of experience in real-time quality testing and assessment through the QA Farm are now being extended to Zephyr! Join Jan Altenberg's talk to learn how the QA Farm was established and why we're now bringing its proven approach to the Zephyr ecosystem. We're also looking for YOUR input! Which real-time scenarios and use cases would you like to see measured and evaluated in Zephyr? We'd love to discuss your ideas with you and explore how we can turn them into reality together.

We are delighted to welcome you to the Supervisory Board of OSADL, Yvonne! Your expertise in software governance and Open Source in industry, together with your strategic insight and strong dedication, will be a valuable asset to OSADL. We look forward to working with you and to the fresh perspectives you will bring. Welcome aboard!

𝗢𝗽𝗲𝗻 𝘀𝗼𝘂𝗿𝗰𝗲 𝗶𝘀 𝗲𝘀𝘀𝗲𝗻𝘁𝗶𝗮𝗹 𝘁𝗼 𝗶𝗻𝗱𝘂𝘀𝘁𝗿𝗶𝗮𝗹 𝘀𝗼𝗳𝘁𝘄𝗮𝗿𝗲. 𝗧𝗵𝗲 𝗖𝘆𝗯𝗲𝗿 𝗥𝗲𝘀𝗶𝗹𝗶𝗲𝗻𝗰𝗲 𝗔𝗰𝘁 𝗺𝗮𝗸𝗲𝘀 𝗶𝘁 𝗲𝘃𝗲𝗻 𝗺𝗼𝗿𝗲 𝘀𝘁𝗿𝗮𝘁𝗲𝗴𝗶𝗰. At 𝗜𝗡𝗡𝗢 𝗗𝗔𝗬𝗦 𝟮𝟬𝟮𝟲, Open Source Automation Development Lab (OSADL) eG brings deep expertise at the intersection of open source, automation, compliance, and industrial software practice. For manufacturers, the question is no longer simply whether open source can be used. The question is how FOSS components, contributions, responsibilities, and post-deployment changes can be managed in a regulated environment. OSADL’s contribution will help clarify the risks, opportunities, and practical implications for manufacturers and communities alike. Join us in Karlsruhe to discuss how open source can remain a strength for industrial innovation while supporting stronger cybersecurity practices. 📅 15–16 July 2026 📍 Karlsruhe, Germany 𝙍𝙚𝙜𝙞𝙨𝙩𝙚𝙧 𝙣𝙤𝙬 https://buff.ly/yzqSqWh #INNODAYS26Wibu

𝗖𝗥𝗔 𝗶𝗻 𝗱𝗲𝗿 𝗣𝗿𝗮𝘅𝗶𝘀 - 𝘃𝗼𝗻 𝗱𝗲𝗿 𝗥𝗲𝗴𝘂𝗹𝗶𝗲𝗿𝘂𝗻𝗴 𝗯𝗶𝘀 𝘇𝘂𝗿 𝗨𝗺𝘀𝗲𝘁𝘇𝘂𝗻𝗴 ✅ Eine ganze Session widmet sich beim 𝗖𝘆𝗯𝗲𝗿 𝗥𝗲𝘀𝗶𝗹𝗶𝗲𝗻𝗰𝗲 𝗔𝗰𝘁 𝗦𝘂𝗺𝗺𝗶𝘁 𝗠ü𝗻𝗰𝗵𝗲𝗻 den konkreten Prozessen und Methoden rund um den CRA - mit fünf Vorträgen aus der Praxis: ▶ Zehn häufige Fragen (und ihre Antworten) zum CRA - Caren Kresse, Open Source Automation Development Lab (OSADL) eG ▶ Entwicklung im Schatten der EN 18031 – Lessons Learned aus der RED und Ausblick auf den CRA - Ralf Wagner, TQ-Group ▶ CRA in der praktischen Umsetzung - Hendrik Dettmer, TÜV TRUST IT | DE ▶ Von der Regulierung zur Umsetzung: CRA mit Hilfe von IEC EN 62443 - Michelle Michael, TÜV Informationstechnik GmbH - TÜVIT (TÜV NORD GROUP) ▶ Die verborgene Komplexität der CRA-Umsetzung im OT-Bereich: Wechselwirkungen der Regulierung und ihre Folgen für Hersteller und Betreiber - Dr. Nils Abeling, secunet Security Networks AG 📅 07.–08. Juli 2026 📍 Garching bei München Jetzt anmelden und dabei sein - den Link zur Registrierung finden Sie in den Kommentaren.

🔒 #Cybersicherheit in der Automobilbranche: Sind Sie bereit für den Cyber Resilience Act? Mit dem Cyber Resilience Act (#CRA) verschärft die #EU die Anforderungen an die Sicherheit von Hardware- und Softwareprodukten. Gerade in der #Automobilindustrie entstehen durch komplexe Lieferketten und den zunehmenden Einsatz von Open-Source-Software neue Herausforderungen und Risiken. In unserer kostenfreien Online-Veranstaltung erfahren Sie, welche Anforderungen der CRA künftig an Unternehmen stellt und wie Sie sich frühzeitig und praxisnah darauf vorbereiten können. 📅 Jetzt anmelden: https://lnkd.in/e6AjzaN 📅 18. Juni 2026 | 14:00–16:00 Uhr 📍Digital

𝗢𝗽𝗲𝗻 𝘀𝗼𝘂𝗿𝗰𝗲 𝗶𝘀 𝗮 𝗳𝗼𝘂𝗻𝗱𝗮𝘁𝗶𝗼𝗻 𝗼𝗳 𝗺𝗼𝗱𝗲𝗿𝗻 𝗶𝗻𝗱𝘂𝘀𝘁𝗿𝗶𝗮𝗹 𝘀𝗼𝗳𝘁𝘄𝗮𝗿𝗲. 𝗧𝗵𝗲 𝗖𝘆𝗯𝗲𝗿 𝗥𝗲𝘀𝗶𝗹𝗶𝗲𝗻𝗰𝗲 𝗔𝗰𝘁 𝗻𝗼𝘄 𝗺𝗮𝗸𝗲𝘀 𝗶𝘁 𝗮 𝗰𝗲𝗻𝘁𝗿𝗮𝗹 𝗽𝗮𝗿𝘁 𝗼𝗳 𝘁𝗵𝗲 𝗰𝗼𝗺𝗽𝗹𝗶𝗮𝗻𝗰𝗲 𝗱𝗶𝘀𝗰𝘂𝘀𝘀𝗶𝗼𝗻. At 𝗜𝗡𝗡𝗢 𝗗𝗔𝗬𝗦 𝟮𝟬𝟮𝟲, Caren Kresse from the Open Source Automation Development Lab will examine how manufacturers and FOSS communities are preparing for the new regulatory landscape. Her session, “𝗢𝗽𝗲𝗻 𝗦𝗼𝘂𝗿𝗰𝗲 𝗮𝗻𝗱 𝘁𝗵𝗲 𝗖𝗥𝗔: 𝗖𝗵𝗮𝗹𝗹𝗲𝗻𝗴𝗲𝘀 𝗮𝗻𝗱 𝗢𝗽𝗽𝗼𝗿𝘁𝘂𝗻𝗶𝘁𝗶𝗲𝘀 𝗳𝗼𝗿 𝗠𝗮𝗻𝘂𝗳𝗮𝗰𝘁𝘂𝗿𝗲𝗿𝘀 𝗮𝗻𝗱 𝗖𝗼𝗺𝗺𝘂𝗻𝗶𝘁𝗶𝗲𝘀,” looks at responsibilities for integrated components, internal and external contributions, post-deployment changes, and the interaction between CRA expectations and FOSS license obligations. This is a conversation many industrial companies need to have now, not later. Join us in Karlsruhe to meet experts who work directly at the intersection of open source, industrial automation, and cybersecurity compliance. 📅 15–16 July 2026 📍 Karlsruhe, Germany 𝙍𝙚𝙜𝙞𝙨𝙩𝙚𝙧 𝙣𝙤𝙬 https://buff.ly/yzqSqWh #INNODAYS26Wibu