Beyond CRA Readiness:

Turning Compliance Requirements into Action

December 3, 2026 | 11:00AM EST | 5:00 PM CET

Featured Panelists: TÜV SÜD & Northern.tech

With the EU Cyber Resilience Act (CRA) entering its first phase of implementation, manufacturers face growing pressure to turn regulatory requirements into practical processes. Vulnerability reporting obligations are already in effect, and the December 2027 compliance deadline is fast approaching.

Meeting these requirements means looking beyond initial product development to how connected products are secured, updated, and maintained throughout their lifecycle. How can manufacturers identify gaps in their existing practices, meet vulnerability reporting obligations, and ensure they can securely deploy software updates across devices already in the field?

From regulatory requirements to cybersecurity in the field

In this panel discussion, experts Will Jin from TÜV SÜD and Eystein Stenberg from Northern.tech explore what it takes to move from CRA readiness to implementation. Together, they'll examine how CRA requirements relate to existing standards such as IEC 62443, the challenges of managing vulnerabilities throughout the connected product lifecycle, and the role of secure software updates in maintaining product security after deployment.

Whether you're responsible for product development, engineering, cybersecurity, or compliance, this session will provide practical guidance for closing compliance gaps, strengthening vulnerability management, and preparing for the next phase of CRA requirements.

Featured Panelists

Will Jin is a cybersecurity engineer with a strong technical foundation in both cybersecurity and electromagnetic compatibility (EMC). With extensive experience supporting testing and certification programs, he focuses on IoT device cybersecurity compliance, medical device cybersecurity requirements, and the development of customized evaluation programs. Known for his collaborative approach and practical problem-solving, he is appreciated by TÜV SÜD customers for providing clear guidance and reliable support throughout their compliance journey.

Eystein Stenberg is the CTO of Northern.tech, a leader in device lifecycle management, and the creator of Mender, the market-leading solution for robust, secure, and customizable over-the-air (OTA) software updates. With over 15 years of experience in security and systems management, Stenberg has served on the frontlines of some of the largest production environments and possesses in-depth knowledge on solving real-world system security challenges. An expert in embedded system security and IoT device management, Stenberg routinely shares his insights at industry technology conferences and other sector-focused events like automotive.