Managing Cybersecurity Across the Device Lifecycle
Long-life connected devices create a difficult security challenge. Software components and vulnerabilities continue to evolve long after a product enters the field, while safety requirements, certification constraints, operational availability, and hardware limitations can make traditional patching difficult.
At the same time, requirements such as the EU Cyber Resilience Act, FDA cybersecurity guidance, and IEC 62443 are raising expectations for how manufacturers identify affected products, evaluate vulnerabilities, document risk, and respond throughout the product lifecycle.
This panel brings together perspectives from medical technology, industrial automation, embedded software, and product security to explore how organizations are addressing those pressures in practice—and what different industries can learn from one another.
What You’ll Learn
- Moving beyond the SBOM to determine whether products are actually affected by a vulnerability
- Improving open-source software visibility and vulnerability triage across long product lifecycles
- Balancing cybersecurity requirements with safety certification and operational availability
- Reducing risk when a device cannot be patched immediately
- Applying lessons from medical device postmarket cybersecurity to industrial and embedded systems
- Preparing practical processes for evolving cybersecurity and vulnerability-reporting requirements
From Compliance Requirements to Practical Risk Reduction
Knowing that a vulnerability exists is only the beginning. Product teams still need to understand which devices contain the affected software, whether the vulnerability is exploitable in their specific environment, and what action is appropriate when an immediate update is not possible.
Hear how organizations across regulated and long-life product environments are connecting software visibility, vulnerability analysis, engineering decisions, and compliance into a more practical approach to product security.
Join the Discussion
Whether you work in product security, embedded engineering, software or firmware development, compliance, or technical leadership, this session will offer practical perspectives for managing cyber risk across products that must remain secure and operational for the long term.
Join Lynx, RunSafe Security, Rockwell Automation, and Zimmer Biomet on September 9.
