The Cyber Resilience Act is here: What happens next for IoT security?

Bringing over two decades in journalism, Lucy Barnard has reported on everything from London’s property chessboard to Abu Dhabi’s vertical ambitions — and always delivered the story before deadline. She’s held key roles at Estates Gazette, The National, and Construction Briefing, while freelancing for heavyweights like The Telegraph and The Guardian. Known for turning complex beats into compelling reads, she brings clarity, credibility, and the occasional well-placed zinger to every byline.

Lucy is interested in how technology intersects with major global challenges, from climate change to gender equality and social justice. She believes innovation isn’t just about efficiency or convenience—it’s a powerful tool for building a fairer, more sustainable world.

Industry veteran, David Pashley holds a master’s degree in Electrical Engineering from Imperial College London. Having worked in a variety of technical & commercial roles in the aerospace, design tools and embedded systems sectors, resilience of digital systems is an area of special interest and expertise – and Pashley is a member of the IoTSF’s (IoT Security Foundation’s) Regulatory Watch Working Group.

Founded in 1992, UK value-added reseller, systems integrator & compliance specialist, Direct Insight has helped hundreds of development teams to upgrade to the latest SoC, FPGA and OS technology by choosing the right off-the-shelf hardware, software & tools, by providing the required support & services to fill the gaps, and by allowing customer development teams to focus on their differentiating core skills to deliver excellent products.

Joe has been in the compliance industry for over 25 years and has helped many hundreds of companies get their products onto the global marketplace. Originally an Electromagnetics Researcher at the University of Bradford, Joe moved into EMC consultancy and testing, helping manufacturers find and eliminate their EMC problems. In addition to this he has also gained expertise in the field of EMF Exposure of radio devices and fields.

For the past decade Joe has concentrated on a more customer facing role, particularly with manufacturers of connected products. His primary role at TÜV SÜD involves working closely with project managers and designers to help them ensure they are fully aware of all the requirements for putting a product on the global market. This includes all aspects of regulatory and compliance such as radio, EMC, safety, global country requirements and cybersecurity.

Harrison Parker is Regional Sales Manager for QNX across the UK, Ireland and Nordics. He works with manufacturers and engineering teams building connected, safety-critical and long-lifecycle embedded systems across industrial automation, medical devices, robotics, rail, aerospace and defence. His focus is helping organisations understand how foundational software choices can support secure-by-design development, software supply chain visibility, vulnerability management and long-term product support as requirements such as the EU Cyber Resilience Act reshape connected product development.

Richard is Managing Consultant at Xitex Limited, which provides consultancy on defining and launching wired and wireless connected products with emphasis on creating secure IoT products and their secure supply chains. He has spent over 40 years in the electronics and communications sectors, having worked for Lucent Technologies, Sony, Cisco. At Ubiquisys and subsequently Cisco, after its acquisition of Ubiquisys in 2013, Richard was the Product Manager and secure manufacturing supply chain architect for their global cloud based activation system for more than a million 3G/4G small cells manufactured in Europe and SE Asia.

Richard was also Plenary Chair for five years and one of the lead authors for the foundation’s Assurance Framework, which has been internationally recognised by the EU’s ETSI and US NIST standards bodies, as a point of reference for IoT security. Richard was also a contributor/reviewer for the UK Government’s ‘Code of Practice for Consumer IoT Security’, ETSI’s technical standard TS 103 645 and harmonised standard EN 303 645 on IoT Security and more recently, an expert on the CENELEC WG-8 RED (EN18031-1/2/3) and WG-9 CRA European Cybersecurity standards committees. Richard is currently the chair of the BSI IST/33/-/9 "Special Working Group - Cyber Resilience Act Standardization Request", whose role it is, is to lead the BSI [UK] expert delegation in CENELEC, for the co-ordination of the cyber-security standardisation activities relating to the EU’s CRA (Cybersecurity Resilience Act).