Rewiring the Software Supply Chain
Date and Time: 12:30 – 13:15 (BST), Wednesday 16th September 2026
Place: Zoom
REGISTER HERE
The Cyber Resilience Act (“CRA”) is a defining regulatory milestone for anyone building, selling or integrating digital products in the EU. With the countdown to full application well underway, businesses are moving from high‑level awareness to hands‑on preparation.
Reporting obligations enter into force in September 2026, while the core requirements kick in from December 2027. Fundamentally, the underlying principle of the CRA is simple: security by design. However, delivering on this requires alignment across the entire product lifecycle: from initial design and development to ongoing maintenance and longer-term support.
In this session, Chris Kemp and Marija Nonkovic will break down what the CRA means in practice:
- how it interacts with other regulatory frameworks;
- what software vendors should be prioritising; and
- how organisations are approaching readiness as the deadlines draw near.
