In this debate we will explore the impact of the new forthcoming European regulation and notably the CRA (Cyber Resilience Act) on OW2 projects and open source projects in general. How projects will be able to ensure that their downstream consumers can comply with the CE Mark requirement? We will also address more largely the state of the European standard system.