Session 3
Preparing for the Cyber Resilience Act
PBC Connect – RSAC 2026
The State of AI Risk Management report is here.
Download a copy
Panelists:
Cassie Crossley
Cybersecurity & Product Security Officer; Board Member; Book Author
Mark Lambert
Chief Product Officer, ArmorCode
Nathan Motyl
SVP, Global Operations, AI, Architecture, & eCommerce, Solera
Deepak Parashar
Head of Product Security, Grail
Sahil Bhanushali
Head of technology risk and Assurance, Lucid Motors
The EU Cyber Resilience Act (CRA) is no longer a distant regulatory cloud, but a fast-approaching reality with critical vulnerability disclosure requirements beginning in September 2025. This session brings together experts to provide a pragmatic guide for navigating issues encompassing, SaaS, IoT, and AI. They will share their perspectives on how to audit product roadmaps for CRA compliance, manage the complexities of SBOMs for legacy firmware, and implement the mandatory reporting structures required to maintain access to the European market.
Uniting security professionals on a mission to democratize software security and solve its ever-evolving challenges with the power of Community.
.svg)
.svg)
The information contained in The Purple Book of Software Security and the contents of the Purple Book Community website contain ideas expressed by Purple Book Community members. These opinions are their own, do not reflect the views of the organizations they belong to, and have no affiliation with nor make any endorsement of any commercial products or services, including those of community sponsors.