=== Cyber Resilience Act (CRA) Readiness Project

Links: +
link:https://github.com/FreeBSDFoundation/all-projects/tree/main/Cyber%20Resilience%20Act%20Readiness[Cyber Resilience Act Readiness] URL: https://github.com/FreeBSDFoundation/all-projects/tree/main/Cyber%20Resilience%20Act%20Readiness[]

The Foundation is running a project through 2026 to actively prepare the FreeBSD Foundation, Project, and the community for the EU Cyber Resilience Act.
There are six main areas of focus: Security and Vulnerability Handling, SBOM Toolchain, Public Documentation, Community Legislative Engagement, Public Project Repository, and Communications.

Over February and March the project has moved from planning into active delivery.
Internal weekly coordination meetings are now in place, and the Foundation's contracted security lead, Pierre Pronchery, has joined the FreeBSD Security Team to align the project work more closely with the FreeBSD Project's existing security processes.

On the regulatory engagement front, the Foundation co-signed an Open Source Initiative letter to the European Commission supporting voluntary security attestations, contributed to Eclipse Foundation feedback on draft CRA guidance, and attended FOSDEM and FOSS Backstage to collaborate with other open source communities navigating the CRA.

Technical work on the SBOM toolchain is progressing well, with early automated SBOM generation now under testing.
A public project repository has been created to track progress transparently, a community FAQ has been published, and a dedicated contact address is available for questions.
Outreach to downstream manufacturers has also begun.
