Panel discussion: Article 14 in Practice | You're STILL not ready for the CRA

What does Article 14 of the EU Cyber Resilience Act (CRA) mean in practice, and what do manufacturers and other organisations need to do to prepare? Recorded at the IoT Security Foundation's 'You're STILL not ready for the CRA' event in London on 8th October 2026 at the premises of SafeShark, this panel discussion explores the practical implications of Article 14, which sets out manufacturers' reporting obligations for actively exploited vulnerabilities and severe security incidents affecting products with digital elements. The panel brings together industry experts to discuss the challenges of implementing these requirements, the implications for product security and vulnerability management, and what organisations should be doing now to prepare for the CRA's reporting obligations. Panel members: Richard Marshall (Chair) - Xitex Mustanir Ali – Element Viktor Petersson – Screenly Jonathan Marshall – SafeShark Zahra Khani – Keysight The discussion is part of the IoT Security Foundation's ongoing work to help organisations understand and prepare for the EU Cyber Resilience Act, turning regulatory requirements into practical action. Find out more about the IoT Security Foundation (IoTSF): https://iotsecurityfoundation.org/ #CyberResilienceAct #CRA #IoTSecurity #CyberSecurity #VulnerabilityManagement #ProductSecurity