09.30– 10.15 Keynote: General introduction to the regulations in cybersecurity with extra focus on Cyber Resilience Act
Objective: Attendances need to feel the urgency about the regulations and get the overview of the different regulations. Focus is on the legal perspective, how to reduce financial consequences
10.15– 10.45 Break
10.45– 12.00 Industry case 1 + Discussion – Vulnerability and incident handling
Objective: To get a general understanding of how incidents can be handled and how to fulfil the requirements that come into force in September. Discuss and get knowledge on how others handles vulnerabilities and reporting.
12.00– 13.00 Lunch
13.00– 14.30 Industry case 2 + Group workshop – Cybersecurity compliance
Objective: Get knowledge from how others are planning to meet the cybersecurity requirements and how to develop secure products. Discuss standards, methods and assessments as well as looking at roles from different perspectives e.g. engineers, architects and managers.
14.30– 15.00 Break
15.00– 16.00 Group feedback
Objective: Synthesize key insights, identify concrete gaps in current practices, and prioritize 3–5 actionable improvements participants will take back to their organizations.
16.00– 16.30 Next steps
Objective: Define concrete pathways for continued learning and collaboration, including establishing a community of practice (CoP), and exploring how participants will stay connected and share knowledge going forward.