--- title: Untangling the EU Cyber Resilience Act description: "AppSec teams are overwhelmed by vulnerability data, yet traditional severity models like CVSS fail to reflect real-world risk. Effective prioritization requires contextual signals such as exploitability (e.g., EPSS), asset criticality, reachability, and business impact.\nWe will walk through how software composition analysis (SCA) tools like Black Duck® SCA can help organisations meet several CRA obligations, from open source governance and SBOM validation to vulnerability and risk management. Attendees will gain clarity on what the CRA actually demands, what no vendor can do for them, and how AppSec leaders across diverse industries can evolve their programs and mindset to meet the regulation with confidence." image: https://webinars.techstronglearning.com/hubfs/2026.07.15%20Black%20Duck-Social-1080x1080.png --- Untangling the EU Cyber Resilience Act ![OnDemand-2026.07.15 Black Duck-LandingPage-1540x660-SB](https://webinars.techstronglearning.com/hs-fs/hubfs/OnDemand-2026.07.15%20Black%20Duck-LandingPage-1540x660-SB.png?width=1540&height=660&name=OnDemand-2026.07.15%20Black%20Duck-LandingPage-1540x660-SB.png "OnDemand-2026.07.15 Black Duck-LandingPage-1540x660-SB") ## Sponsored By: ![BlackDuckLogo-1](https://webinars.techstronglearning.com/hs-fs/hubfs/BlackDuckLogo-1.png?width=2000&name=BlackDuckLogo-1.png) ##### On Demand The EU Cyber Resilience Act (CRA) introduces sweeping requirements that significantly impact how software is built, secured, and maintained. Yet many organizations underestimate the CRA’s complexity, often assuming that a single tool or vendor can “solve” compliance end to end. This webinar unpacks the realities behind CRA readiness, debunking the myth of one-size-fits-all solutions and highlighting the multifaceted technical, organizational, and process-level changes now required from software-producing organizations. We will walk through how software composition analysis (SCA) tools like Black Duck® SCA can help organisations meet several CRA obligations, from open source governance and SBOM validation to vulnerability and risk management. Attendees will gain clarity on what the CRA actually demands, what no vendor can do for them, and how AppSec leaders across diverse industries can evolve their programs and mindset to meet the regulation with confidence. Key Takeaways: • Clarity on CRA obligations: What the law really requires and where common misconceptions lead teams astray • Understanding into why no single tool is enough: The organizational and technical gaps that must be addressed beyond vendor solutions • Insight into where Black Duck fits in: Practical examples of its CRA-aligned capabilities, including OSS governance, SBOM hygiene, vulnerability prioritization, and policy enforcement # Register Below: We'll send you an email confirmation ![Emmanuelgonzalezcarmona-modified](https://webinars.techstronglearning.com/hs-fs/hubfs/Emmanuelgonzalezcarmona-modified.png?width=320&height=320&name=Emmanuelgonzalezcarmona-modified.png "Emmanuelgonzalezcarmona-modified") ### Emmanuel Gonzalez Carmona ###### Cybersecurity Expert - Black Duck  Emmanuel Gonzalez Carmona is an experienced Application Security and DevSecOps expert, working as Lead Partner Sales Engineer at Black Duck Software. He supports partners and enterprise teams in identifying and reducing security risks across the entire software development lifecycle — covering SCA, SAST, DAST, supply‑chain risk management, CI/CD hardening, and Shift‑Left strategies. His career includes leading global pre‑sales organizations and many years as a system and cloud engineer, giving him a rare combination of deep technical expertise and practical implementation experience. Based in Italy, Emmanuel advises international customers on modern security and development practices. His plan B is farming tomatoes and producing homemade limoncello in Italy.  ![Techstrong Group logo](https://webinars.techstronglearning.com/hubfs/Techstrong%20Group%20logo.png "Techstrong Group logo") ![TechstrongLearning-Colored-2](https://webinars.techstronglearning.com/hubfs/TechstrongLearning-Colored-2.png "TechstrongLearning-Colored-2") ![DO.com R+B RGB Logo-Feb-22-2024-07-06-28-4406-PM](https://webinars.techstronglearning.com/hs-fs/hubfs/DO.com%20R+B%20RGB%20Logo-Feb-22-2024-07-06-28-4406-PM.png?width=1363&height=267&name=DO.com%20R+B%20RGB%20Logo-Feb-22-2024-07-06-28-4406-PM.png "DO.com R+B RGB Logo-Feb-22-2024-07-06-28-4406-PM") ![Security boulevard logo blue](https://webinars.techstronglearning.com/hs-fs/hubfs/Security%20boulevard%20logo%20blue.png?width=2000&height=360&name=Security%20boulevard%20logo%20blue.png "Security boulevard logo blue") ![CNN Blue and White-4](https://webinars.techstronglearning.com/hs-fs/hubfs/CNN%20Blue%20and%20White-4.png?width=1400&height=400&name=CNN%20Blue%20and%20White-4.png "CNN Blue and White-4") ![Techstrong.ai blue logo](https://webinars.techstronglearning.com/hs-fs/hubfs/Techstrong.ai%20blue%20logo.png?width=2000&height=295&name=Techstrong.ai%20blue%20logo.png "Techstrong.ai blue logo") © 2026 [Techstrong Inc.](https://techstronggroup.com/) All Rights Reserved. [Contact Support.](mailto:jared@techstronggroup.com)