Open Source Friday - ossf/wg-globalcyberpolicy - 08-15-2025

[AndreaGriffiths11]

Name

GitHub Handle

Tell us about yourself

Project Name

Project Repo Link

Stream Date

• Yes
• Not yet

Dates

No response

Twitter URL

Bluesky

LinkedIn URL

Additional Information

Project Repo
https://github.com/ossf/wg-globalcyberpolicy/

Open Source Friday ✨ is a place for maintainers to share what they are working on. This is an opportunity to share demos, stories, and inspiration with other GitHub users.

The stream will be hosted on stream yard, but broadcasted out to our viewers on Twitch, Linkedin and Youtube. The recording will also be uploaded to GitHub's Youtube Channel.

Here is a recording guide for streaming remotely.

[david-a-wheeler]

Here are what I think are the answers:

Name:
David A. Wheeler, Christopher "CRob" Robinson

GitHub Handle:
david-a-wheeler, SecurityCRob

Tell us about yourself:

David A. Wheeler focuses on open source software (OSS) and on developing secure software. His works on developing secure software include the Open Source Security Foundation (OpenSSF) Secure Software Development Fundamentals Courses, and "Fully Countering Trusting Trust through Diverse Double-Compiling (DDC)". He is the Director of Open Source Supply Chain Security at the Linux Foundation and teaches a graduate course in developing secure software at George Mason University (GMU). Dr. Wheeler has a PhD in Information Technology, a Master's in Computer Science, a certificate in Information Security, a certificate in Software Engineering, and a B.S. in Electronics Engineering, all from George Mason University (GMU). He is a Certified Information Systems Security Professional (CISSP) and a Senior Member of the Institute of Electrical and Electronics Engineers (IEEE).

Christopher Robinson (aka CRob) is the Chief Security Architect for the Open Source Software Foundation (OpenSSF). With over 25 years of experience in engineering and leadership, he has worked with Fortune 500 companies in industries like finance, healthcare, and manufacturing, and spent six years as Program Architect for Red Hat’s Product Security team. CRob has spoken at major events such as RSA, BlackHat, and DefCon, and was recognized as a top presenter at Red Hat Summits in 2017 and 2018. He holds certifications like CISSP and CSSLP. He leads several OpenSSF working groups, chairs its Technical Advisory Committee, and contributes to the FIRST PSIRT SIG.

Project Name:
OpenSSF Global Cyber Policy Working Group (WG) and the EU Cyber Resilience Act (CRA)

Project Repo Link:
https://github.com/ossf/wg-globalcyberpolicy/

Stream Date:
2025-08-15

Twitter URL:
https://twitter.com/drdavidawheeler
https://twitter.com/SecurityCRob

Bluesky:

LinkedIn URL:
https://www.linkedin.com/in/david-a-wheeler-27798688/
https://www.linkedin.com/in/darthcrob/

Additional Information
Project Repo:
https://github.com/ossf/wg-globalcyberpolicy/

[madalinnneag]

Following David’s example, please find below my answers:

Name:
Madalin Neag

GitHub Handle:
madalinneag

Tell us about yourself:
Madalin serves as EU Policy Advisor for OpenSSF acting as global cybersecurity and open-source software-related public policy expert and executing a range of activities aimed at positioning OpenSSF as a trusted resource on global policy and partner within the EU policy framework.
With a career spanning technical, managerial, and research roles, Madalin brings a solid background in R&D&I, EU-funded initiatives, standardization, open-source ecosystems, and project/program/innovation management. His experience combines deep technical expertise with active involvement in international projects. He is passionate about innovation, interoperability, and shaping digital policy in next-generation ICT systems.
Madalin holds a double master’s degree from Télécom Bretagne (France) and the Polytechnic University of Timișoara (Romania), offering a strong academic foundation enriched by continuous professional development. Leveraging his strengths in analytical thinking, project planning, stakeholders’ management, strategic thinking & coordination, effective communication, and the ability to work both independently and within teams, he is committed to advancing open-source security through collaboration with upstream and established communities.

LinkedIn URL:
https://www.linkedin.com/in/madalinneag/

David already provided the common links for all of us.

[KevinCrosby]

Thanks all!

Drafting some questions / ideas for the show

Interview Questions for GitHub Open Source Friday Show

Guests: David A. Wheeler (@david-a-wheeler), Christopher "CRob" Robinson (@SecurityCRob), Madalin Neag (@madalinneag)
Project: OpenSSF Global Cyber Policy Working Group & the EU Cyber Resilience Act (CRA)
Stream Date: 2025-08-15

Opening & Personal Background

1. Can each of you introduce yourselves and share a bit about your journey into open source and cybersecurity?
2. David, you’ve helped shape secure software development education and standards. What inspired you to focus on supply chain security and teaching?
3. CRob, you’ve had an extensive career in product security across industries. What’s driven your passion for open source and security architecture?
4. Madalin, you bridge technical and policy worlds in the EU. How did your international background and R&D experience lead you to OpenSSF?

OpenSSF & Global Cyber Policy Working Group

5. Can you give us an overview of the OpenSSF Global Cyber Policy Working Group—its mission, goals, and why it matters today?
6. What are some of the key achievements or initiatives from the WG that you’re most proud of?

EU Cyber Resilience Act (CRA)

7. The EU Cyber Resilience Act is a hot topic. What are its implications for open source software and the broader tech ecosystem?
8. How is OpenSSF engaging with policymakers and stakeholders around the CRA? What’s the WG’s role in this?
9. Are there aspects of the CRA that you think need more clarity or improvement, especially concerning open source communities?

Collaboration & Community Impact

10. How does the WG collaborate with other organizations or governments globally?
11. What are some of the challenges you face when aligning policy, technical needs, and community priorities?
12. Can you share a story where collaboration led to a tangible policy or security improvement for open source projects?

Technical & Educational Initiatives

13. David, what have you learned from developing the Secure Software Development Fundamentals Courses, and how are they being adopted?
14. CRob, you’ve led OpenSSF working groups and technical advisory efforts. What practices have proven most effective in scaling security initiatives across open source projects?
15. Madalin, how are you helping position OpenSSF as a trusted resource within the EU policy framework? What strategies have worked best?

Looking Forward: Policy, Security & Open Source

16. What trends do you see shaping the future of open source security and global cyber policy?
17. How can developers, maintainers, and organizations best prepare for upcoming regulatory and security challenges?
18. What advice would you give to open source contributors who want to get involved in policy or security advocacy?

Personal Reflections & Call to Action

19. Is there a moment in your career that changed how you think about open source and security?
20. How can our viewers get involved with the OpenSSF Global Cyber Policy WG or contribute to shaping cyber policy and resilience?
21. Where can people find you online and follow your work? (Twitter, LinkedIn, GitHub, etc.)