Name: Navigating Compliance: What Developers Can Learn From Driving - Kadi McKean & Charlie Jones, ReversingLabs
Start: 2025-06-25T11:55:00-0600
End: 2025-06-25T12:15:00-0600

June 23 - 25, 2025
Denver, Colorado
View More Details & Registration
Note: The schedule is subject to change.

The Sched app allows you to build your schedule but is not a substitute for your event registration. You must be registered for Open Source Summit North America 2025 to participate in the sessions. If you have not registered but would like to join us, please go to the event registration page to purchase a registration.

This schedule is automatically displayed in Mountain Daylight Time (UTC/GMT -6). To see the schedule in your preferred timezone, please select from the drop-down menu to the right, above "Filter by Date."

IMPORTANT NOTE: Timing of sessions and room locations are subject to change.

Wednesday June 25, 2025 11:55am - 12:15pm MDT

Bluebird Ballroom 3B

When driving on a highway, you have to follow the rules of the road—some apply to everyone, while others only apply to commercial drivers. Open source maintainers and software publishers face a similar divide regarding regulatory compliance.

While software manufacturers must meet extensive legal and security obligations, open source maintainers often assume these regulations do not apply directly to them—but do they? In this talk, we’ll separate fact from fiction by breaking down what rules like the EU Cyber Resilience Act require from maintainers versus software vendors.

We’ll explore the limited enforceable obligations for open source projects, including secure development policies and vulnerability reporting, and discuss when (if ever) these rules impact maintainers. By understanding these distinctions, open source contributors can make informed decisions about risk, responsibility, and collaboration with commercial software teams—without unnecessary compliance burdens.

Speakers

Kadi McKean

Community Manager, ReversingLabs

Kadi is passionate about the DevOps / DevSecOps community since her days of working with COBOL development and Mainframe solutions. At ReversingLabs she collaborates with developers and security researchers to help entities prioritize their open source risk, reduce technical debt... Read More →

Charlie Jones

Director of Product Management, ReversingLabs

Charlie is currently a Director of Product Management and subject matter expert in cybersecurity and digital trust. Charlie has 10 years experience delivering strategic transformation initiatives, specializing in cybersecurity, TPRM, and regulatory compliance for Fortune 100 financial... Read More →

Wednesday June 25, 2025 11:55am - 12:15pm MDT
Bluebird Ballroom 3B

cdCon

Audience Experience Level Any

Open Source Summit North America 2025

Kadi McKean

Charlie Jones

Sign up or log in to save this to your schedule, view media, leave feedback and see who's attending!