Red Hat becomes a member of the ORC Working Group within the Eclipse Foundation with a view to helping organizations comply with the EU Cyber Resilience Act using open-source security solutions.

The Eclipse Foundation's Open Regulatory Compliance (ORC) Working Group has published its first major release to assist organizations in complying with the new Cyber Resilience Act (CRA) of the European Union. The release is a living document, available to the community, offering specifications, best practices and reference materials to aid open-source stakeholders in complying with industry-mandated practices in cybersecurity and vulnerability management.

The ORC Working Group, formed to lead developers, enterprises, and open-source foundations through regulatory environments amid the shifting landscape now has more than 50 members. Such long-standing members as Nokia and Mercedes-Benz will be joined by its newest strategic entrants: Microsoft, Red Hat, GitHub, Google, and ekxide.

Red Hat emphasized the significance of the endeavor, indicating that the resources represent a pivotal move to the open-source community in the endeavor of handling CRA intricacies. Roman Zhukov, Security Communities Lead at Red Hat Open Source Program Office, said the company was determined to provide a resilient and secure software supply chain as a result of working together.

The CRA imposes high penalties on digital products sold in the EU, which makes life difficult for organizations that largely depend on open-source software, which is estimated to comprise up to 96 percent of all commercial software. The ORC plans to maintain innovation so that it can address the regulatory needs by developing practical and shared solutions.

The role of Red Hat as part of the world's tech leaders reinforces the increasing role of combined compliance forces to determine the future of open source in the world of regulated digital space in Europe.