CRA in Practice: Cross-Industry Lessons from Industrial, Automotive, and Medical Device Security

The EU Cyber Resilience Act (CRA) is reshaping how connected products are designed, maintained, and secured — but compliance looks very different across industries with long product lifecycles, complex supply chains, and safety-critical environments. While many discussions focus on regulatory language or technical requirements alone, the real challenge for embedded teams is operationalizing secure-by-design principles in real-world products and development environments.

This cross-industry roundtable brings together leaders from industrial controls, automotive systems, and medical device security to discuss how organizations are preparing for CRA requirements and aligning with frameworks such as IEC 62443. Panelists will explore the practical realities behind vulnerability management, SBOM readiness, secure update strategies, legacy system constraints, supplier risk, and long-term product support obligations.

The session will also examine the CRA enforcement timeline and what organizations should prioritize ahead of two key milestones: the September 11, 2026 requirement for mandatory vulnerability and incident reporting through the ENISA platform, and the December 11, 2027 deadline when the full CRA requirements take effect, including secure-by-design obligations, vulnerability management lifecycle requirements, technical documentation, conformity assessments, and CE marking for products with digital elements.

Rather than a technical deep dive or compliance checklist, this session focuses on the organizational and engineering decisions teams are making now to prepare for implementation. Attendees will gain practical insight into how different industries are balancing security, safety, operational continuity, and regulatory pressure — and what embedded product teams should prioritize over the next 12–24 months to move from compliance planning to operational readiness.

This session is part of our “CRA Virtual Conference". Registration/event page here.