Embedded Devices and Compliance Pressure: How Teams are Reducing Risk in Long-Life Connected Devices
9
2:00 PM - 3:00 PM
Join us on Wednesday, September 9, at 10:00 AM ET for a cross-industry discussion on how medical device and industrial teams are managing cybersecurity risk and compliance across connected products that may remain in the field for decades.
The EU Cyber Resilience Act, FDA cybersecurity guidance, and IEC 62443 secure development practices differ in scope, but they increasingly require manufacturers to demonstrate the same core capabilities.
Teams must know what software is in their products, identify which devices are affected by a vulnerability, evaluate product-specific risk, and reduce that risk when immediate patching is not possible.
In this panel discussion, leaders from RunSafe Security, Lynx, Rockwell Automation, and Zimmer Biomet will compare how their industries are addressing these challenges, where their approaches diverge, and what they can learn from one another.
Event Details
Date: September 9, 2026
Time: 10:00 AM ET
What You’ll Learn
- What industrial manufacturers can learn from medical device postmarket cybersecurity programs
- How teams move from an SBOM to a defensible affected or not-affected determination
- Where open-source software tracking and vulnerability triage commonly break down
- How cybersecurity requirements can be reconciled with safety certification and operational availability
- Which controls meaningfully reduce risk when a device cannot be patched immediately
- What manufacturers should prioritize as CRA vulnerability reporting requirements begin
Register now to save your spot.
Speakers
Shane Fry
CTO, RunSafe Security
Maciej Halasz
Director EMEA Open Source Solutions, Lynx
Joel Max
Senior Manager, Product Security Incident Response Team, Rockwell Automation
John Howie
CISO of Zimmer Biomet
9
2:00 PM - 3:00 PM