Ode to Resilience is a podcast about the EU Cyber Resilience Act, hosted by engineer Piet De Vaere and technology lawyer August Bournique. Both are closely involved in the CRA implementation work, and together they cut through the complexity of one of the most ambitious technology regulations ever passed. If you want to hear about the CRA straight from Brussels, this is the podcast for you!
The WebPKI? Broken. PHP? Broken. GitLab? Broken. The security world is on fire as we are joined by standardisation expert and former engineering leader Aki Rose Braun. We go through the week’s calamities, from certificates with trivially guessable keys to 70% of the web being vulnerabile to remote code excution, and explore to what extent this week would have looked different if it had taken place after the CRA’s entry into effect.
Ode to Resilience is hosted by
Piet De Vaere: Electrical Engineer, CRA consultant & Member of the CRA Expert Group (Linkedin (https://www.linkedin.com/in/devaere/) | Webpage (https://devae.re))
and
August Bournique: Silicon Valley technology lawyer, CRA consultant & Former Special Rapporteur for ETSI CRA standards (Linkedin (https://www.linkedin.com/in/august-bournique-668b66165/) | Webpage (https://bourniquelaw.com/))
You can reach out to us on: podcast@productsecurity.c (mailto:podcast@productsecurity.ch)h
16 Oct 2026
E8 - Open Source with Maarten Aertsen
Piet and August are joined by Maarten Aertsen of NLnet Labs, who helped shape the CRA’s open source provisions. They unpack how the law defines free and open source software, the new role of the open source steward, and what manufacturers integrating open source still owe, including the Article 13(6) duty to report vulnerabilities upstream.
Ode to Resilience is hosted by
Piet De Vaere: Electrical Engineer, CRA consultant & Member of the CRA Expert Group (Linkedin (https://www.linkedin.com/in/devaere/) | Webpage (https://devae.re))
and
August Bournique: Silicon Valley technology lawyer, CRA consultant & Special Rapporteur for ETSI CRA standards (Linkedin (https://www.linkedin.com/in/august-bournique-668b66165/) | Webpage (https://bourniquelaw.com/))
You can reach out to us on: podcast@productsecurity.c (mailto:podcast@productsecurity.ch)h
8 Oct 2026
E7 - Important and critical products
August and Piet discuss what Important and critical products are under the CRA, and to what extend that really matters for manufacturers.
Ode to Resilience is hosted by
Piet De Vaere: Electrical Engineer, CRA consultant & Member of the CRA Expert Group (Linkedin (https://www.linkedin.com/in/devaere/) | Webpage (https://devae.re))
and
August Bournique: Silicon Valley technology lawyer, CRA consultant & Special Rapporteur for ETSI CRA standards (Linkedin (https://www.linkedin.com/in/august-bournique-668b66165/) | Webpage (https://bourniquelaw.com/))
You can reach out to us on: podcast@productsecurity.c (mailto:podcast@productsecurity.ch)h
19 Sept 2026
E6 - The Product Liability Directive with Amelia Alder
What exactly is the Product Liability Directive, and how does it interact with the CRA? Listen to this weeks' episode (starring the amazing Amelia Alder) to find out.
We had some audio issues this week, please bear with us!
Ode to Resilience is hosted by
Piet De Vaere: Electrical Engineer, CRA consultant & Member of the CRA Expert Group (Linkedin (https://www.linkedin.com/in/devaere/) | Webpage (https://devae.re))
and
August Bournique: Silicon Valley technology lawyer, CRA consultant & Special Rapporteur for ETSI CRA standards (Linkedin (https://www.linkedin.com/in/august-bournique-668b66165/) | Webpage (https://bourniquelaw.com/))
You can reach out to us on: podcast@productsecurity.c (mailto:podcast@productsecurity.ch)h
4 Sept 2026
E5 - Reporting obligations (Article 14)
Piet and August discuss the reporting obligations in CRA article 14 that will enter into effect on the 11th of September. What are they? How serious are they? And is everyone ready? Find out in this exciting new episode!
Ode to Resilience is hosted by
Piet De Vaere: Electrical Engineer, CRA consultant & Member of the CRA Expert Group (Linkedin (https://www.linkedin.com/in/devaere/) | Webpage (https://devae.re))
and
August Bournique: Silicon Valley technology lawyer, CRA consultant & Special Rapporteur for ETSI CRA standards (Linkedin (https://www.linkedin.com/in/august-bournique-668b66165/) | Webpage (https://bourniquelaw.com/))
You can reach out to us on: podcast@productsecurity.c (mailto:podcast@productsecurity.ch)h
21 Aug 2026
E4 - Remote Data Processing Solutions (RDPS)
Piet and August take on RDPS, one of the CRA's most contested concept, pulling apart its definition almost word by word: what counts as a "function" of a product? What does "designed and developed by or on behalf of the manufacturer" mean exactly? And what exactly is "at a distance"? And does all of this really mater anyway?
Ode to Resilience is hosted by
Piet De Vaere: Electrical Engineer, CRA consultant & Member of the CRA Expert Group (Linkedin (https://www.linkedin.com/in/devaere/) | Webpage (https://devae.re))
and
August Bournique: Silicon Valley technology lawyer, CRA consultant & Special Rapporteur for ETSI CRA standards (Linkedin (https://www.linkedin.com/in/august-bournique-668b66165/) | Webpage (https://bourniquelaw.com/))
You can reach out to us on: podcast@productsecurity.ch (mailto:podcast@productsecurity.ch)
7 Aug 2026
E3 - What is the minimal CRA product?
Piet and August welcome their first guest, Götz Martinek, who brings a question he deals with regularly: what's the minimal product with digital elements, and does it really need the full CRA compliance treatment? They test the CRA's scope definitions against two real objects, a calculator with no data interface and a washing machine with a technician-only diagnostic port. From there they explore how risk assessments and compliance paperwork can scale down for genuinely low-risk products without disappearing entirely. The episode closes with a look at the baseline obligations, like documentation retention and a single point of contact, that apply no matter how trivial the product is.
Ode to Resilience is hosted by
Piet De Vaere: Electrical Engineer, CRA consultant & Member of the CRA Expert Group (Linkedin (https://www.linkedin.com/in/devaere/) | Webpage (https://devae.re))
and
August Bournique: Silicon Valley technology lawyer, CRA consultant & Special Rapporteur for ETSI CRA standards (Linkedin (https://www.linkedin.com/in/august-bournique-668b66165/) | Webpage (https://bourniquelaw.com/))
You can reach out to us on: podcast@productsecurity.c (mailto:podcast@productsecurity.ch)h
24 Jul 2026
E2 - Supply Chain and the CRA
Piet and August dig into supply chain security as a hidden third goal of the EU Cyber Resilience Act. They break down the CRA's upstream and downstream obligations for manufacturers, tackle the tricky question of how to handle open source and first-party components, and explore the difference between proactive due diligence and reactive vulnerability monitoring. The episode closes with a thought-provoking finding: the CRA may allow authorities to deem a product non-compliant based on where it was made and who made it, raising questions about digital sovereignty that go far beyond technical security.
Ode to Resilience is hosted by
Piet De Vaere: Electrical Engineer, CRA consultant & Member of the CRA Expert Group (Linkedin (https://www.linkedin.com/in/devaere/) | Webpage (https://devae.re))
and
August Bournique: Silicon Valley technology lawyer, CRA consultant & Special Rapporteur for ETSI CRA standards (Linkedin (https://www.linkedin.com/in/august-bournique-668b66165/) | Webpage (https://bourniquelaw.com/))
You can reach out to us on: podcast@productsecurity.ch (mailto:podcast@productsecurity.ch)
10 Jul 2026
E1 - What is the CRA?
In the debut episode of Ode to Resilience, Piet and August introduce themselves and lay the groundwork for the podcast by answering the most basic question: what is the EU Cyber Resilience Act? They break down what "products with digital elements" actually covers (spoiler: nearly everything digital), walk through the four main pillars of CRA requirements, from product security and secure development processes to long-term support obligations and vulnerability reporting, and demystify the compliance timeline. The episode closes with a grounded take on enforcement and the famously large fines, reassuring listeners that the CRA, while ambitious, is fundamentally reasonable and manageable for manufacturers willing to take cybersecurity seriously.
Ode to Resilience is hosted by
Piet De Vaere: Electrical Engineer, CRA consultant & Member of the CRA Expert Group (Linkedin (https://www.linkedin.com/in/devaere/) | Webpage (https://devae.re))
and
August Bournique: Silicon Valley technology lawyer, CRA consultant & Special Rapporteur for ETSI CRA standards (Linkedin (https://www.linkedin.com/in/august-bournique-668b66165/) | Webpage (https://bourniquelaw.com/))
You can reach out to us on: podcast@productsecurity.ch (mailto:podcast@productsecurity.ch)
Reach and audience
Public platform figures. Ratings count people who left a rating, not total listeners.
Spotify
5.0 / 5
5 ratings
Contact Ode to Resilience
Guest appearances
Books guests
Based on episode analysis; this does not confirm that the show is currently accepting guests.
Host of Ode to Resilience?
Claim your podcast to manage its listing and keep your show details accurate.
Pod Engine is an independent podcast discovery and analytics service and is not affiliated with or endorsed by this podcast. Artwork and show content belong to their owners. Full legal notice.
Explore this show Podcast research with Pod Engine
