The EU Cyber Resilience Act is here, and it changes what “shipping a device” means. Manufacturers now have to prove they can patch, maintain and report on security issues for years after a product ships. For a lot of teams building on Zephyr, that raises a hard question: how do you actually plan for a 10 to 15 year support window?
Join Jonathan Beri (Canonical, Head of Product for IoT, and founder of Golioth) and Chris Rommel (EVP, VDC Strategy) for a practical look at what’s changing, what the market is telling us, and how Zephyr 26.04 LTS fits into a real compliance strategy.
What we’ll cover
- What the CRA actually requires, and where the deadlines and gray areas are
- What VDC Strategy’ research shows about how device makers are (and aren’t) preparing
- How the new Zephyr offer from Canonical with extended LTS period changes the lifecycle math for MCU-class devices
- Where OTA updates and device management fit into CRA field-update requirements
- Practical steps to start architecting for a longer support window now
Who should attend
Firmware and product teams building on Zephyr or considering Zephyr, engineering leads planning device roadmaps, and anyone responsible for security compliance on connected hardware.