CRA Secure Boot Q&A | You're STILL not ready for the CRA

Following his presentation on Secure Boot – An Introduction, Ian Pearson of Microchip answers audience questions at the IoT Security Foundation's 'You're STILL not ready for the CRA' event, held on Thursday 8th October 2026 at SafeShark's London premises. Secure Boot is a critical element of device security, helping establish a Root of Trust and ensuring that devices run authentic, trusted software. But how should manufacturers approach implementation, and what role does Secure Boot play in meeting the requirements of the EU Cyber Resilience Act (CRA)? Building on Ian's presentation, this Q&A explores the practical considerations surrounding Secure Boot, device integrity, chains of trust and the wider security measures needed throughout the product lifecycle and supply chain. About the event Organised by the IoT Security Foundation (IoTSF) in partnership with SafeShark, 'You're STILL not ready for the CRA' brought together industry experts to explore the challenges of preparing connected products for the EU Cyber Resilience Act. About IoT Security Foundation The IoT Security Foundation is an international industry organisation dedicated to making connected products and systems secure, helping manufacturers and technology providers adopt security best practices throughout the product lifecycle. Find out more: https://www.iotsecurityfoundation.org #CyberResilienceAct #CRA #SecureBoot #IoTSecurity #Cybersecurity #Microchip #IoTSF #DeviceSecurity #RootOfTrust #ProductSecurity