As the European Union continues to reshape its cybersecurity regulatory landscape, product vendors face a growing need for clarity, alignment, and practical guidance. Corsec is pleased to announce our attendance at the 7th International Conference on the EU Cyber Security and Resilience Acts, taking place March 24–26 in Brussels.
This year’s conference comes at a critical moment, as implementation of the Cyber Resilience Act (CRA) accelerates and the EU Common Criteria Scheme (EUCC) continues to evolve. Corsec will be on site to engage with regulators, certification bodies, industry peers, and product manufacturers to deepen our understanding—and to help translate regulatory intent into actionable security and compliance strategies.
Representing Corsec in Brussels
Corsec will be represented by Dayanandini Pathmanathan, Corsec’s Senior Program Manager for Common Criteria. With more than seven years of experience guiding Common Criteria certifications—and hands‑on involvement in FIPS 140 certification efforts—Dayanandini brings deep expertise at the intersection of product security engineering, certification schemes, and regulatory compliance. She holds a degree in Electrical Engineering and works closely with vendors navigating complex, multi‑jurisdictional requirements.
Why This Conference Matters to Product Vendors
The EU Cybersecurity Act Conference is not just about policy—it is about operational reality. For manufacturers selling into the European market, the CRA introduces new expectations around secure‑by‑design development, vulnerability handling, post‑market responsibilities, and supply‑chain accountability. At the same time, EUCC is redefining how Common Criteria evaluations are performed and recognized across Europe.
Corsec’s focus at the conference is to:
- Gain deeper insight into how CRA requirements are being interpreted and operationalized
- Understand how EUCC and CRA conformity assessments intersect
- Collaborate with stakeholders to identify practical, scalable approaches for vendors of complex products
- Bring clarity back to customers navigating overlapping standards, schemes, and enforcement timelines
Key Tracks & Sessions Corsec Will Be Following
Throughout the conference, Corsec will be actively engaging across several tracks that are particularly relevant to manufacturers:
- The EU Cybersecurity Agenda 2025–2029: What It Means for Industry
This track provides a strategic view of the Commission’s priorities for the next legislative cycle, including CRA implementation, NIS 2 enforcement, and the future direction of certification schemes. For vendors, these discussions shape long‑term product and compliance planning. - From Regulation to Reality: How the EC Is Supporting CRA Implementation Across Europe
Sessions focused on how the European Commission is supporting harmonized CRA adoption offer insight into what “compliance” will look like in practice—and where flexibility or risk remains for manufacturers preparing today. - Certification in Practice: From EUCC to CRA Conformity
These discussions explore how EUCC, EUCS, and other schemes relate to CRA obligations. Understanding this mapping is essential for vendors deciding where certification adds value versus where it introduces unnecessary cost or duplication. - Designing for Lifecycle Security and Post‑Market Responsibility
CRA Articles addressing vulnerability reporting, patch delivery, and supply‑chain assurance are a major shift for many organizations. This track highlights what continuous compliance means beyond initial market entry. - Panel Discussion: AI Act Cybersecurity—Real-World Risks, Requirements, and What Comes Next
“The EU’s AI Act introduces sweeping new cybersecurity expectations—along with plenty of uncertainty. In this panel discussion, experts will break down how the rules reshape AI deployment, what “compliance” actually requires in practice, and where the biggest technical and organizational challenges lie. Panelists will provide a clear view of the security measures regulators expect, how to implement them without blowing up existing workflows, and what these obligations mean for your company’s risk landscape.” - The Cost of Compliance: New Realities for Testing, Assessment, and Post-Market Obligations
As assessment, testing, and post‑market obligations expand, vendors must budget realistically for long‑term compliance. This track addresses the emerging cost structures and tradeoffs organizations will face. - What Market Surveillance Authorities Expect from Manufacturers under the CRA
“What manufacturers need to provide under the CRA, information and supporting evidence to enable verification of compliance and assurance of requirements.” - Too Much Already, Supply Chain Security? A Sensible Approach to Rating True Potential Vulnerabilities Is Needed
“Threat modeling and product-context analysis to cut through the ~140 daily EUVD CVE filings and distinguish real, exploitable vulnerabilities from inflated worst-case assessments.” - Vulnerability Management in Consumer IoT: Why No IoT Manufacturer Is Ready for CRA Vulnerability Management (And How to Fix It)
With increasing scrutiny from Market Surveillance Authorities, manufacturers must be prepared to demonstrate not only secure design, but effective vulnerability monitoring, reporting, and remediation over time. - Panel Discussion: Navigating Fragmented Global Cyber Regulations
With overlapping global frameworks—from CRA and EUCC to international standards—this panel addresses whether meaningful harmonization is achievable and what manufacturers can do in the meantime.
Corsec’s Approach: Learn, Collaborate, Guide
Corsec’s participation reflects our commitment to learning directly from regulators and peers, collaborating across the ecosystem, and using those insights to guide product vendors with clear, experience‑based recommendations. Our goal is not just compliance—but helping vendors build security programs that are defensible, sustainable, and aligned with real regulatory expectations.
Looking Ahead
This conference is an important step in an ongoing conversation. Following the event, Corsec will share insights and observations on what manufacturers should be paying attention to as CRA enforcement approaches and EUCC continues to mature.
If you are preparing for CRA, evaluating EUCC certification paths, or reassessing your vulnerability management and post‑market strategies, we encourage you to connect with Corsec to discuss how these developments may impact your products and roadmap.
Stay tuned for post‑conference insights from Brussels.
###
Connect With Us:
Stay up to date with Corsec as we bring you all the most recent updates to the standards, certifications, and requirements – Subscribe
Press Contact:
Jake Nelson
Dir of Marketing
Jnelson@corsec.com
