Evolving Cybersecurity Requirements: PSTI, RED, CRA | SafeShark | You're STILL not ready for the CRA

At the IoT Security Foundation's 'You're STILL Not Ready for the CRA' event, held in London on 8th October 2026, Alex Buchan, Director at SafeShark, delivered a short opening presentation exploring the evolving cybersecurity regulatory landscape and what it means for manufacturers of connected products. As event partner and venue host, SafeShark welcomed attendees with an overview of three key pieces of legislation shaping product cybersecurity requirements: UK Product Security and Telecommunications Infrastructure (PSTI) – Establishing baseline security requirements for consumer connectable products EU Radio Equipment Directive (RED) – Introducing cybersecurity requirements for internet-connected radio equipment EU Cyber Resilience Act (CRA) – Expanding cybersecurity obligations across products with digital elements, including vulnerability management, secure development and ongoing compliance Alex highlights how these regulations build upon one another, the increasing expectations placed on manufacturers, and why organisations need to take a proactive approach to product security and regulatory compliance. About SafeShark SafeShark specialises in cybersecurity testing and compliance, helping manufacturers navigate UK and EU regulatory requirements, including PSTI, RED and the CRA. Find out more: https://www.safeshark.co.uk/ About the IoT Security Foundation The IoT Security Foundation (IoTSF) is an international organisation dedicated to making connected products and systems secure, helping industry address cybersecurity challenges through collaboration, best practice and practical guidance. Find out more: https://www.iotsecurityfoundation.org/ #CyberResilienceAct #CRA #IoTSecurity #Cybersecurity #SafeShark #PSTI #RadioEquipmentDirective #ProductSecurity ‪@TheDTG‬