GlobalPlatform CRA Conformance Summit

Overview

The CRA Conformance Summit is a specialized industry event hosted by GlobalPlatform, designed to provide a practical roadmap for manufacturers and developers to meet the requirements of the European Union’s Cyber Resilience Act (EU CRA).

GlobalPlatform will be convening European and Asian Governments and manufacturers to facilitate the discussion on upcoming requirements and challenges for Asia – Europe trade relationships driven by cybersecurity regulations in both regions.

The summit specifically highlights how established security frameworks—namely SESIP (Security Evaluation Standard for IoT Platforms) and PSA Certified—can be used as "pre-packaged" evidence of compliance, significantly reducing the complexity of obtaining the mandatory CE mark for connected products in the EU.

Agenda

Overview
9.30 – 9.45	Opening Keynote: Stephanie El Rhomri, Chair GlobalPlatform
9.45 – 10.10	Keynote: EU Cyber Resilience Act – What it means for the industry? – Maika Föhrenbach, Head of Sector Product Security & Certification Policy – DG Connect EU Commission
10.10 – 10.30	Keynote: Standards development supporting the implementation of the EU Cyber Resilience Act
Conformance to EU CRA
10.30 – 10.50	Presentation: What is SESIP & PSA Certified? – Philippe Gaudillat, STMicroelectronics
10.50 – 11.20	Keynote: Practical conformance to EU CRA with SESIP & PSA Certified – Erik Wood, Infineon
Networking Break
11.20 – 11.40	Presentation: A product manufacturer’s perspective
11.40 – 12.00	Presentation: Designing Secure-by-Default IoT Products: What Will Actually Change Under the CRA, Rachel Menda-Shabat - Winbond
12.00 – 12.45	Panel Discussion: Can CRA conformance be simple? Moderator: Fabrice Heiser - SGS Brightsight Panelist: Erik Wood, Infineon, Product Manufacturer, Philipe Gaudillat – STMicroelectronics, Rachel Menda-Shabat – Winbond
Cybersecurity Regulations beyond EU
12.45 – 13.10	Presentation: Government 1 (Japan TBC)
13.10 – 13.30	Presentation: Singapore IOT labeling scheme and the Global Cybersecurity Labeling Initiative – Henry Tan, Singapore CSA
Lunch Break
14.30 – 14.55	Presentation: China Government presentation
Future Outlook
14.55 – 15.15	Presentation: The cost of compliance: New realities with upcoming worldwide regulations – Jorge Carrera, DEKRA
15.15 – 16.00	Panel Discussion: Harmonization of Global Cybersecurity Regulations Moderator: Gil Bernabeu, GlobalPlatform; Panelists: Olivier Van Nieuwenhuyze – STMicroelectronics
16.00 – 16.45	Panel Discussion: Ecosystem readiness and what is there still to be done? Moderator: Nikola Medic, Keysight Panelist: Victor An - DPLS Labs, Georg Stutz - NXP
16.45 – 17.00	Fireside Chat: GlobalPlatform CTO – Gil Bernabeu & Executive Director – Ana Tavares Lattibeaudiere
17.00 – 18.00	Cocktail Reception

Speakers

Stephanie El Rhomri GlobalPlatform Chair of the Board

Ms. El Rhomri is the current GlobalPlatform Chair and has served on the GlobalPlatform Board since 2015. In 2017, she was appointed as the GlobalPlatform Secretary and in 2021, she was appointed as the GlobalPlatform Chair.

As Vice President Europe / North Africa at Fime, Ms. El Rhomri is supporting Fime’s growth in this region and the deployment of services across payments, banking, and urban mobility. She is a subject matter expert in testing and certification.

Gil Bernabeu CTO, GlobalPlatform

In his role as Chief Technology Officer, Gil is responsible for defining and implementing the technical roadmap for the organization and provides counsel and guidance to the GlobalPlatform Board. He drives forward the development of GlobalPlatform’s specifications and certifications to allow markets and geographies to deploy and manage secure, value-added services. Gil also acts as GlobalPlatform’s central technical liaison point, coordinating the efforts of the technical committees, market task forces and liaisons with industry partners.

In his role at Thales, Gil supports the evolution of the Digital Identity and Security roadmap by enabling open innovation and securing participation in funded innovation projects.

Ana Tavares Lattibeaudiere Executive Director, GlobalPlatform

As GlobalPlatform Executive Director, Ana is responsible for driving awareness and accelerating adoption of GlobalPlatform’s specifications globally. She also oversees the organization’s strategy, marketing and business development within key vertical sectors. Before joining she was the EVP and Head of North America for the GSMA, responsible for driving global initiatives such as eSIM, Spectrum, networks (5G, 4G), IoT, RCS, identity and gender diversity. Prior to this role, she led the GSMA global efforts on IoT across different industry verticals. Ana’s career prior to GSMA is focused on strategy, having held positions at BCG, Deloitte Consulting and Accenture. She began her career in private banking at Merrill Lynch in the area of investments in new technologies. Ana is also a proud Board member of the Global Telecoms Women Network where she drives initiatives that promote gender diversity in tech sectors.

Maika Föhrenbach Head of Sector Product Security & Certification Policy, DG Connect EU Commission

Rachel Menda-Shabat Director of Certification, Winbond

Rachel Menda-Shabat has over two decades of security product development and certification expertise. As Winbond's Director of Certification, she's led multiple certifications of Winbond Secure Flash products, including Common Criteria EAL5+ and FIPS 140-3.

Actively contributing to GlobalPlatform, particularly in the SESIP working group, she played a pivotal role in mapping SESIP to automotive standards like ISO21434.

In 2021, she received the GlobalPlatform Star Award for her efforts in integrating SESIP with the NIST database.

Beyond this, she's involved with international security entities such as Eurosmart, ISCI-WG1, CCUF, and ISO.

Philippe Gaudillat SESIP Committee Co-Chair, STMicroelectronics

Philippe Gaudillat is Head of Security Certification team for MCU/MPU ICs at STMicroelectronics based in Grenoble, France. Philippe has worked in the security certification domain since 2013 on PayTV certifications and then more recently (2019) on SESIP/PSA/FIPS certifications for IoT products.

Erik Wood PSA Certified WG Vice-Chair, Infineon

Erik Wood is the Senior Director of Microcontroller Cryptography and Product Security at Infineon Technologies and Chairs their IoT Security Center of Excellence.

Erik spent the first 14-years of his career at various wireless sensor network startups. In 2010, he joined a small group of cryptographic security experts led by the world-renowned cryptographer, Dr. Whitfield Diffie, to build a startup bringing to market new and super lightweight cryptography algorithms for resource constrained IoT devices. Following that, in 2012 Erik joined Cypress to work on secure memory and passive RFID technology.

Now at Infineon, Erik leads the long-term IoT security strategy, manages a team that defines new-product security requirements and is the steward of Infineon’s Edge Protect brand.

Formerly, Erik served as the Chair of the US delegation to the ISO RFID Security Committee and served as the Chair of the NFC Forum Security Committee.

Erik holds a bachelor’s degree in electrical engineering from UCLA and a corporate MBA from Santa Clara University.

CRA Conformance Summit