Bert Jan Schrijver
CTO, OpenValue · Java Champion
New EU cyber legislation and its impact on your software strategy
A personal note
New EU rules say vulnerabilities in your software must be managed. That changes how we all deal with legacy.
Most enterprise software wasn't built yesterday, and that's fine: it runs the business. But new European cyber legislation changes the rules, and it is broader than one law. NIS2, the AI Act, DORA for the financial sector and the Cyber Resilience Act for software products: for almost every organisation that builds or runs software, at least one of these now applies. Doing nothing is no longer an option, and rebuilding everything usually isn't either.
Together with our partner HeroDevs we're hosting an afternoon on exactly this: what the new legislation really asks of your organisation, how Rabobank implements it at scale, and which strategies exist for modernising legacy software without rewriting everything at once.
We're keeping it deliberately small this time: at our own office in the Werkspoorkathedraal, with plenty of time for coffee, questions and good conversations.
RW
Roy Wasse
Director OpenValue Group
Programme
Three talks.
One afternoon.
Three angles on the same question: how do you keep enterprise software in control, secure and compliant? The legislation, the practice, and the tooling to get there. Final timings and speakers may shift slightly. We'll confirm the programme two weeks before.
14:30
Doors open
Arrival coffee. Pick up your badge, meet the other attendees and settle in. We've planned extra time for a proper welcome.
15:00
Welcome
A short word from the hosts on why we're here.
Roy Wasse & Ramon Wieleman · OpenValue
15:10
Talk 1 · New EU cyber legislation and its impact on your software strategy
A guided tour of the European rules that now shape how software is built, secured and modernised: the Cyberbeveiligingswet (Dutch version of NIS2), the EU AI Act, DORA for the financial sector and the Cyber Resilience Act for software products. Not every law applies to every organisation, but almost every organisation that builds or runs software falls under at least one. This talk helps you find out which ones apply to yours, what they actually require from the way you build and run software, and how they change your software strategy: from vulnerability management and SBOMs to the choices you make about legacy software.
Bert Jan Schrijver · OpenValue
15:40
Talk 2 · How Rabobank implements the new rules at scale
How a large financial organisation practically deals with the legal implications of closing software vulnerabilities: from SBOM insight to prioritising and fixing, at the scale of a bank.
Soroosh Khodami · Rabobank
16:10
Break
Coffee break.
16:30
Talk 3 · Securing the stack you already run
Keeping software built on end-of-life frameworks like Spring and Angular secure and compliant, including a live demo of analysing SBOM data to pinpoint exactly where your issues sit.
Simon Taylor · HeroDevs
17:00
Drinks & networking
Drinks, snacks and conversation at the office.
18:00
Close
End of the day.
Speakers
The legislation, the practice, and the tooling.
Soroosh Khodami
Rabobank
How Rabobank implements the new rules at scale
Simon Taylor
HeroDevs
Securing the stack you already run
Venue
Our office at the Werkspoorkathedraal.
This edition we're hosting you at the OpenValue office in the Werkspoorkathedraal, a former industrial hall in the Werkspoor quarter of Utrecht. An intimate setting with premium catering, close to the speakers and to each other. Nine minutes on foot from Utrecht Zuilen, fifteen minutes by taxi from Utrecht Centraal.
Address
Tractieweg 41
3534 AP Utrecht
By train
Utrecht Centraal
15 min by taxi · 25 min by bus
By car
Free on-site parking
100+ spaces available
Good to know
A few practical things.
Is this event free?
Yes. This is an open event: registration is free and everyone dealing with enterprise software is welcome.
Can I bring a colleague?
Yes. Forward them this page and ask them to register individually so we have everyone's dietary preferences.
Will sessions be recorded?
No. We believe in physical meetings, so we won't be filming the sessions. We will share the slides with attendees afterwards.
I have dietary restrictions.
Let us know on the registration form. We cater for vegetarian, vegan, gluten-free and most common allergies.
Registration
Everyone is welcome.
Register in the form below. You'll receive a confirmation by email.