Navigating the CRA regulation: What should international companies care about and why?

As cybersecurity risks intensify and regulations evolve, organizations are under growing pressure to understand what compliance actually requires and act before deadlines become business disruptions.

The new Cyber Resilience Act (CRA) is a landmark regulation with far-reaching implications. While it originates in Europe, its reach extends well beyond, affecting any organization that develops, distributes, or sells connected products in the European market, regardless of its headquarters.

For many, the question is no longer whether CRA matters, but how to prepare effectively and stay ahead.

From secure hardware design to software updates in the field

In this panel discussion, CRA experts Mena Roumbakis from STMicroelectronics and Eystein Måløy Stenberg from Northern.tech unpack the elements of the EU CRA, identify who needs to pay attention, and share the key steps organizations should take now to strengthen readiness and resilience.

Whether you're leading product, engineering, compliance, or security, this session will provide a clear path to managing regulatory pressure and planning a path forward before it becomes a legal liability.