OSPS Baseline to EU Cyber Resilience Act Mapping Mapping Document

openssf/osps-baseline-to-cra

Cross-walk from the Open Source Project Security (OSPS) Baseline controls to EU Cyber Resilience Act. Each mapping asserts a "relates-to" relationship; strength, confidence-level, and rationale are left unset and should be added as the mappings are individually reviewed.

maps to 2 frameworks

Published by OSPS Baseline Authors

License No license declared

Pull latest (v0.0.0-dev-671f23f)

$grcli unpack --repository openssf/osps-baseline-to-cra --version v0.0.0-dev-671f23f

Releases

1 live

Version	Manifest digest	Published	License	Status
v0.0.0-dev-671f23f	7e84e4d7d85ac9…	1mo ago	No license declared	Live unsigned	Details →

Mapping references

external standards this artifact maps to (v0.0.0-dev-671f23f)

Open Source Project Security Baseline @draft osps-baseline

The Open Source Project Security (OSPS) Baseline is a set of security criteria that projects should meet to demonstrate a strong security posture.
Cyber Resilience Act @20.11.2024 CRA

Regulation (EU) 2024/2847 of the European Parliament and of the Council of 23 October 2024 on horizontal cybersecurity requirements for products with digital elements and amending Regulations (EU) No 168/2013 and (EU) 2019/1020 and Directive (EU) 2020/1828 (Cyber Resilience Act) (Text with EEA relevance)

Builds upon

artifacts this one extends, imports, or shares a lexicon with

No upstream references yet

This artifact doesn't extend, import, or share a lexicon with anything else in the registry.

Extended or imported by

other artifacts that build upon this one

No dependents yet

Published artifacts that extend or import this one will appear here.