CRA Mondays: The path to a global vulnerability management platform

Published by Olle Johansson on

May 5, 2025: In this special CRA Mondays episode, Olle E. Johansson joins the ORC Working Group to discuss the urgent need for a resilient, globally coordinated vulnerability reporting system, in light of recent disruptions to the NVD and the growing demands of the Cyber Resilience Act (CRA). Olle shares lessons from the CVE/NVD funding crisis, outlines the risks of centralised control, and presents a vision for a multi-stakeholder, federated vulnerability ecosystem that puts trust, interoperability, and global participation at the centre. Topics Covered:

  • What’s behind the NVD slowdown and why it matters
  • The limitations of today’s vulnerability reporting infrastructure
  • How the CRA mandates a robust vulnerability management system
  • A roadmap for building a federated, global alternative
  • The role of open source, CNAs, and government collaboration

See the full video on YouTube!

Categories: Video