Miguel Morales – VP, Strategic Cloud Alliances @ Cumulocity | The Radian Compliance Podcast

Episode Description: In this episode of Radian Compliance, we're joined by Miguel Morales, VP of Strategic Cloud Alliances at Cumulocity, to explore the rapidly evolving intersection of IoT, cybersecurity, compliance, and connected products. Miguel brings extensive experience in industrial IoT, having worked across connected devices, cloud platforms, and industrial technology. We dive into how the growing number of connected products is changing the cybersecurity and compliance responsibilities of manufacturers, particularly as new regulations reshape the way organizations approach product security. A major focus of the conversation is the EU Cyber Resilience Act (CRA) and how it intersects with NIS2. Miguel explains why compliance is increasingly moving away from periodic documentation toward continuous evidence generated directly from the operational state of connected devices. We also explore SBOMs, vulnerability monitoring, firmware security, PKI certificates, software updates, and the challenge of managing cybersecurity across globally distributed device fleets. Miguel shares why manufacturers need to think about cybersecurity throughout the entire product lifecycle rather than treating compliance as something addressed only before launch or during an audit. The conversation also looks at how manufacturers can turn regulatory requirements into better lifecycle services, how IoT data can support auditable compliance, and what organizations need to consider as connected products become increasingly critical to industrial infrastructure. This is a valuable conversation for IoT leaders, manufacturers, cybersecurity professionals, compliance teams, technology executives, and anyone responsible for securing connected products and preparing for emerging regulatory requirements.