Lecture
CRA Expert Panel: From Requirements to Evidence Across the Embedded Supply Chain
- at -
- Hall C5C5.100
- Language: English
- Type: Panel discussion
Lecture description
"After a day of technical sessions, this panel will test how CRA requirements hold up across real embedded development workflows. Moderator Satyajit Sinha will bring together standards, security, component, and product perspectives to examine the decisions that cannot be settled by a generic compliance checklist. The discussion will follow an embedded product from component selection through release and support. How should an OEM use a supplier’s security claims and documentation without treating them as proof of conformity for the finished device? What evidence supports a risk assessment when boot firmware, a Linux distribution, applications, and cloud services come from different sources? Who receives a vulnerability report, who fixes the affected software, and how do suppliers and integrators coordinate a timely update? What to do about SBOMS – are they effectively mandatory to deliver to your customers? Panelists will also address what teams can (and should) act on today without waiting for future clarifications.
Audience questions will close the session. The goal is to give engineering teams clearer ownership boundaries, better questions for suppliers, and a sharper plan for turning security controls into defensible product evidence."
Audience questions will close the session. The goal is to give engineering teams clearer ownership boundaries, better questions for suppliers, and a sharper plan for turning security controls into defensible product evidence."
