With the Cyber Resilience Act (CRA), NIS2 and DORA, Java teams are facing new requirements for transparency, security and control over their software supply chains. At Java Forum Stuttgart 2026, Java Champion Ixchel Ruiz and Karakun CEO Markus Schlichting will explain the role Software Bills of Materials (SBOMs) will play in the future and what development teams should start preparing today to meet regulatory requirements by 2027.

Java Forum Stuttgart (JFS) will take place on 9 July 2026 at the Kultur- & Kongresszentrum Liederhalle in Stuttgart, Germany. For many years, it has been one of the leading Java events in the German-speaking region. With multiple parallel tracks, a comprehensive expo area and a strong community presence, the conference brings together developers, architects, DevOps professionals and technology companies.

CRA, NIS2 and DORA: What Java-Teams Need to Know

In their joint session “CRA, NIS2, DORA: What Senior Java Engineers Must Deliver Before 2027”, Ixchel Ruiz and Markus Schlichting will explore the technical and organisational challenges that new European regulations are creating for software manufacturers.

By December 2027, the Cyber Resilience Act will require many organisations to provide Software Bills of Materials (SBOMs) for their software products. For Java applications, this presents a particular challenge: complex dependency trees, transitive dependencies, BOM-managed versions, container images and runtime components all need to be documented and managed in a transparent and traceable way.

The session will provide practical guidance on the information an SBOM should capture in a Java ecosystem and explain why CRA, NIS2 and DORA increasingly view software supply chains as a critical element of modern cybersecurity. SBOMs are becoming an important mechanism for demonstrating control over open-source dependencies and improving transparency across complex software ecosystems.

About the Speakers

Ixchel Ruiz has been developing software applications and tools since 2000. As a member of the JCP Executive Committee, Java Champion, Oracle ACE Pro, Testcontainers Community Champion and open-source advocate, she is widely recognised as one of the leading voices in the international Java community.

Markus Schlichting is CEO of Karakun and brings more than 20 years of experience in software engineering and the successful delivery of complex software projects. His areas of expertise include software architecture, documentation, automation and the establishment of sustainable development processes and toolchains.

Together, Ixchel Ruiz and Markus Schlichting combine deep Java expertise with extensive experience in software architecture, open source, security and modern software supply chains — topics that are becoming increasingly important in the context of CRA, NIS2, DORA and SBOMs.

Meet us in Stuttgart

Karakun will also be present in the expo area throughout Java Forum Stuttgart 2026. Our team looks forward to discussing software development, software architecture, Java technologies, cybersecurity, digital sovereignty and modern software supply chains with attendees.

Visitors are also invited to participate in our community survey and learn more about the projects and initiatives we are currently working on.

And of course, we will once again be bringing Karakun stickers and authentic Basler Läckerli, the traditional Swiss gingerbread speciality from Basel.

We Look Forward to Meeting You

The requirements introduced by CRA, NIS2, DORA and SBOMs will have a significant impact on Java teams in the years ahead. Java Forum Stuttgart provides an excellent opportunity to explore the technical, organisational and regulatory implications at an early stage.

If you would like to learn how Software Bills of Materials can be integrated into existing development and operational processes, or what CRA, NIS2 and DORA mean for your organisation in practice, speak with Ixchel Ruiz, Markus Schlichting or our team during the event.

Karakun supports organisations in building secure and sustainable software solutions — from software architecture and open-source governance to security by design, software supply chain management, compliance and digital sovereignty.

We look forward to engaging discussions and meeting the Java community in Stuttgart.