William Janssen
CTO & Head of Engineering | Author of a book on the EU Cyber Resilience Act | Building the operational side of CRA compliance | Ex-Red Hat & Founder
The Hague, The Netherlands
Actions
William Janssen is founder, CTO & Head of Engineering at TrustEngine. He has spent his career on the supplier side of software: he founded and ran companies that built patient portals for healthcare and a platform-as-a-service, and worked at Red Hat. He has seen what shipped software costs to support over its lifetime. He is the author of Einde van het MVP-tijdperk, a Dutch-language book on the EU Cyber Resilience Act, and speaks on the regulation at events including the Linux Foundation Member European Forum in Prague and Code & Compliance in Brussels.
Links
Area of Expertise
Topics
Transparency Upstream, Evidence Downstream: Manufacturers and Open Source under the CRA
The Cyber Resilience Act settled the legal side of the open source relationship: product responsibility stays with the manufacturer, stewards carry a light-touch regime, maintainers shielded from manufacturer-grade duties. The operational side is far less settled. Manufacturers must consume and interpret upstream security signals, but what that takes is rarely described from the manufacturer's seat.
This session walks that seat in concrete terms. From 11 September 2026, a manufacturer has 24 hours from awareness of active exploitation to file an early warning. Awareness at that speed is only dependable when machine-readable upstream signals (SBOMs, VEX, provenance, project health) are continuously correlated against what was actually shipped, per product, per configuration, with the record written as it happens, not assembled afterwards.
It also covers the return path: contributions rather than contracts, funding rather than warranties, and a defence of the transparency-versus-assurance boundary that keeps the voluntary model sustainable.
Presented three and a half weeks after the reporting duty goes live, it closes with first field observations from September.
William Janssen
CTO & Head of Engineering | Author of a book on the EU Cyber Resilience Act | Building the operational side of CRA compliance | Ex-Red Hat & Founder
The Hague, The Netherlands
Links
Actions
Please note that Sessionize is not responsible for the accuracy or validity of the data provided by speakers. If you suspect this profile to be fake or spam, please let us know.
Jump to top