https://www.stationista.com en-GB Ode to Resilience https://ode-to-resilience.stationista.com Fri, 21 Aug 2026 04:00:00 +0000 Fri, 28 Aug 2026 16:56:30 +0000 Ode to Resilience is a podcast about the EU Cyber Resilience Act, hosted by engineer Piet De Vaere and technology lawyer August Bournique. Both are closely involved in the CRA implementation work, and together they cut through the complexity of one of the most ambitious technology regulations ever passed. If you want to hear about the CRA straight from Brussels, this is the podcast for you!

]]> Ode to Resilience is a podcast about the EU Cyber Resilience Act, hosted by engineer Piet De Vaere and technology lawyer August Bournique. Both are closely involved in the CRA implementation work, and together they cut through the complexity of one of the most ambitious technology regulations ever passed. If you want to hear about the CRA straight from Brussels, this is the podcast for you!

]]> Piet De Vaere and August Bournique episodic https://cdn.stationista.com/feeds/ode-to-resilience https://cdn.stationista.com/30/6a4e9bc9be26a78c2e018f30/images/68/6a4ea3b60ad7abf19b02db68/pc/6a5299a554cc09593505a24e_feed.jpg Ode to Resilience https://ode-to-resilience.stationista.com Piet De Vaere & August Bournique podcast@productsecurity.ch Piet De Vaere & August Bournique CRA, Cyber Resilience Act, EU regulation, cybersecurity, product security, software compliance, EU law, digital products, manufacturer obligations, cyber law, technology regulation, Europe, cybersecurity policy, open source, product liability no E4 - Remote Data Processing Solutions (RDPS) E4 - Remote Data Processing Solutions (RDPS) full 4 https://ode-to-resilience.stationista.com/e4-remote-data-processing-solutions-rdps_6a85a10d5eb3791d2b0a05b9 c91b4fee065ded21084aabf9649e37f1 01:13:33 https://cdn.stationista.com/30/6a4e9bc9be26a78c2e018f30/images/e7/6a85a41498ccab0b530633e7/ep/6a85a10d5eb3791d2b0a05b9_feed.jpg E4 - Remote Data Processing Solutions (RDPS) https://ode-to-resilience.stationista.com/e4-remote-data-processing-solutions-rdps_6a85a10d5eb3791d2b0a05b9 Piet and August take on RDPS, one of the CRA's most contested concept, pulling apart its definition almost word by word: what counts as a "function" of a product? What does "designed and developed by or on behalf of the manufacturer" mean exactly? And what exactly is "at a distance"? And does all of this really mater anyway?

Ode to Resilience is hosted by

Piet De Vaere: Electrical Engineer, CRA consultant & Member of the CRA Expert Group (Linkedin | Webpage)

and

August Bournique: Silicon Valley technology lawyer, CRA consultant & Special Rapporteur for ETSI CRA standards (Linkedin | Webpage)

You can reach out to us on: podcast@productsecurity.ch

]]> Piet and August take on RDPS, one of the CRA's most contested concept, pulling apart its definition almost word by word: what counts as a "function" of a product? What does "designed and developed by or on behalf of the manufacturer" mean exactly? And what exactly is "at a distance"? And does all of this really mater anyway?

Ode to Resilience is hosted by

Piet De Vaere: Electrical Engineer, CRA consultant & Member of the CRA Expert Group (Linkedin | Webpage)

and

August Bournique: Silicon Valley technology lawyer, CRA consultant & Special Rapporteur for ETSI CRA standards (Linkedin | Webpage)

You can reach out to us on: podcast@productsecurity.ch

]]> Fri, 21 Aug 2026 04:00:00 +0000 no Cyber Resilience Act, CRA, RDPS, remote data processing, cloud, product security, EU regulation, Commission guidance, ETSI standards, manufacturer obligations Piet De Vaere & August Bournique E3 - What is the minimal CRA product? E3 - What is the minimal CRA product? full 3 https://ode-to-resilience.stationista.com/e3-what-is-the-minimal-cra-product_6a723eea6368f623e40d2eb0 65a70353b09d600b572cc1a97f3c3706 00:46:59 https://cdn.stationista.com/30/6a4e9bc9be26a78c2e018f30/images/37/6a72401c9d7c680eda05ea37/ep/6a723eea6368f623e40d2eb0_feed.jpg E3 - What is the minimal CRA product? https://ode-to-resilience.stationista.com/e3-what-is-the-minimal-cra-product_6a723eea6368f623e40d2eb0 Piet and August welcome their first guest, Götz Martinek, who brings a question he deals with regularly: what's the minimal product with digital elements, and does it really need the full CRA compliance treatment? They test the CRA's scope definitions against two real objects, a calculator with no data interface and a washing machine with a technician-only diagnostic port. From there they explore how risk assessments and compliance paperwork can scale down for genuinely low-risk products without disappearing entirely. The episode closes with a look at the baseline obligations, like documentation retention and a single point of contact, that apply no matter how trivial the product is.

Ode to Resilience is hosted by

Piet De Vaere: Electrical Engineer, CRA consultant & Member of the CRA Expert Group (Linkedin | Webpage)

and

August Bournique: Silicon Valley technology lawyer, CRA consultant & Special Rapporteur for ETSI CRA standards (Linkedin | Webpage)

You can reach out to us on: podcast@productsecurity.ch

]]> Piet and August welcome their first guest, Götz Martinek, who brings a question he deals with regularly: what's the minimal product with digital elements, and does it really need the full CRA compliance treatment? They test the CRA's scope definitions against two real objects, a calculator with no data interface and a washing machine with a technician-only diagnostic port. From there they explore how risk assessments and compliance paperwork can scale down for genuinely low-risk products without disappearing entirely. The episode closes with a look at the baseline obligations, like documentation retention and a single point of contact, that apply no matter how trivial the product is.

Ode to Resilience is hosted by

Piet De Vaere: Electrical Engineer, CRA consultant & Member of the CRA Expert Group (Linkedin | Webpage)

and

August Bournique: Silicon Valley technology lawyer, CRA consultant & Special Rapporteur for ETSI CRA standards (Linkedin | Webpage)

You can reach out to us on: podcast@productsecurity.ch

]]> Fri, 07 Aug 2026 04:00:00 +0000 no Cyber Resilience Act, CRA compliance, product with digital elements, CRA scope, CRA risk assessment, essential cybersecurity requirements, vulnerability handling Piet De Vaere & August Bournique E2 - Supply Chain and the CRA E2 - Supply Chain and the CRA full 2 https://ode-to-resilience.stationista.com/e2-supply-chain-and-the-cra_6a53f022044da5f9a806ea34 0ab871f21d3f11387e13a5bd9ab302e5 00:50:27 https://cdn.stationista.com/30/6a4e9bc9be26a78c2e018f30/images/7e/6a53f0e74abe9345aa08db7e/ep/6a53f022044da5f9a806ea34_feed.jpg E2 - Supply Chain and the CRA https://ode-to-resilience.stationista.com/e2-supply-chain-and-the-cra_6a53f022044da5f9a806ea34 Piet and August dig into supply chain security as a hidden third goal of the EU Cyber Resilience Act. They break down the CRA's upstream and downstream obligations for manufacturers, tackle the tricky question of how to handle open source and first-party components, and explore the difference between proactive due diligence and reactive vulnerability monitoring. The episode closes with a thought-provoking finding: the CRA may allow authorities to deem a product non-compliant based on where it was made and who made it, raising questions about digital sovereignty that go far beyond technical security.

Ode to Resilience is hosted by

Piet De Vaere: Electrical Engineer, CRA consultant & Member of the CRA Expert Group (Linkedin | Webpage)

and

August Bournique: Silicon Valley technology lawyer, CRA consultant & Special Rapporteur for ETSI CRA standards (Linkedin | Webpage)

You can reach out to us on: podcast@productsecurity.ch

]]> Piet and August dig into supply chain security as a hidden third goal of the EU Cyber Resilience Act. They break down the CRA's upstream and downstream obligations for manufacturers, tackle the tricky question of how to handle open source and first-party components, and explore the difference between proactive due diligence and reactive vulnerability monitoring. The episode closes with a thought-provoking finding: the CRA may allow authorities to deem a product non-compliant based on where it was made and who made it, raising questions about digital sovereignty that go far beyond technical security.

Ode to Resilience is hosted by

Piet De Vaere: Electrical Engineer, CRA consultant & Member of the CRA Expert Group (Linkedin | Webpage)

and

August Bournique: Silicon Valley technology lawyer, CRA consultant & Special Rapporteur for ETSI CRA standards (Linkedin | Webpage)

You can reach out to us on: podcast@productsecurity.ch

]]> Fri, 24 Jul 2026 04:00:00 +0000 no CRA, Cyber Resilience Act, supply chain security, component due diligence, open source, SBOM, NIS2, digital sovereignty Piet De Vaere & August Bournique E1 - What is the CRA? E1 - What is the CRA? full 1 https://ode-to-resilience.stationista.com/e1-what-is-the-cra_6a4e9dc861e7f07d220fff59 1270bcf3b7d93cd7f97d2814a8e1f763 00:51:22 https://cdn.stationista.com/30/6a4e9bc9be26a78c2e018f30/images/c1/6a4ea1d94f971736c70e93c1/ep/6a4e9dc861e7f07d220fff59_feed.jpg E1 - What is the CRA? https://ode-to-resilience.stationista.com/e1-what-is-the-cra_6a4e9dc861e7f07d220fff59 In the debut episode of Ode to Resilience, Piet and August introduce themselves and lay the groundwork for the podcast by answering the most basic question: what is the EU Cyber Resilience Act? They break down what "products with digital elements" actually covers (spoiler: nearly everything digital), walk through the four main pillars of CRA requirements, from product security and secure development processes to long-term support obligations and vulnerability reporting, and demystify the compliance timeline. The episode closes with a grounded take on enforcement and the famously large fines, reassuring listeners that the CRA, while ambitious, is fundamentally reasonable and manageable for manufacturers willing to take cybersecurity seriously.

Ode to Resilience is hosted by

Piet De Vaere: Electrical Engineer, CRA consultant & Member of the CRA Expert Group (Linkedin | Webpage)

and

August Bournique: Silicon Valley technology lawyer, CRA consultant & Special Rapporteur for ETSI CRA standards (Linkedin | Webpage)

You can reach out to us on: podcast@productsecurity.ch

]]> In the debut episode of Ode to Resilience, Piet and August introduce themselves and lay the groundwork for the podcast by answering the most basic question: what is the EU Cyber Resilience Act? They break down what "products with digital elements" actually covers (spoiler: nearly everything digital), walk through the four main pillars of CRA requirements, from product security and secure development processes to long-term support obligations and vulnerability reporting, and demystify the compliance timeline. The episode closes with a grounded take on enforcement and the famously large fines, reassuring listeners that the CRA, while ambitious, is fundamentally reasonable and manageable for manufacturers willing to take cybersecurity seriously.

Ode to Resilience is hosted by

Piet De Vaere: Electrical Engineer, CRA consultant & Member of the CRA Expert Group (Linkedin | Webpage)

and

August Bournique: Silicon Valley technology lawyer, CRA consultant & Special Rapporteur for ETSI CRA standards (Linkedin | Webpage)

You can reach out to us on: podcast@productsecurity.ch

]]> Fri, 10 Jul 2026 04:00:00 +0000 no CRA, Cyber Resilience Act, EU regulation, product security, cybersecurity, products with digital elements, software regulation, secure development lifecycle, vulnerability management, vulnerability reporting, support period, market surveillance, CE marking, compliance, manufacturer obligations, EU market, enforcement, fines Piet De Vaere & August Bournique