Lecture
CRA Masterclass with Marta Rybczyńska
- at -
- Hall C5C5.100
- Language: English
- Type: Workshop
Lecture description
"What changes when a familiar Raspberry Pi development platform becomes the basis of a product sold in the EU? Working from a defined example device and use case, participants will build a preliminary CRA requirements and evidence map. The exercise begins with a detailed use case analysis, and then moves to the manufacturer’s Article 13 risk assessment. We finish with comparing the tests design choices against Annex I: secure default configuration, protection from unauthorized access, confidentiality and integrity of data and software, security updates, and vulnerability handling.
The group will examine where Raspberry Pi documentation and standard software can help, including secure boot provisioning, disk encryption, image generation, software bills of materials, and security disclosures. It will also identify work that remains with the product manufacturer: defining the deployed configuration, securing exposed interfaces and credentials, managing keys, testing the complete system, documenting dependencies, and maintaining an update and response process over the support period.
The outcome is a practical set of dos and don’ts, open questions, and evidence requests that engineers can adapt to their own designs. The workshop will assess a hypothetical integration; it will not certify a Raspberry Pi product."
The group will examine where Raspberry Pi documentation and standard software can help, including secure boot provisioning, disk encryption, image generation, software bills of materials, and security disclosures. It will also identify work that remains with the product manufacturer: defining the deployed configuration, securing exposed interfaces and credentials, managing keys, testing the complete system, documenting dependencies, and maintaining an update and response process over the support period.
The outcome is a practical set of dos and don’ts, open questions, and evidence requests that engineers can adapt to their own designs. The workshop will assess a hypothetical integration; it will not certify a Raspberry Pi product."
