Webinar Securing your firmware: RED & CRA preparation

RED & CRA 2025 Compliance: IoT Double Challenge

Overview

The year 2025 marks a decisive turning point for European IoT with the simultaneous implementation of the reinforced RED directive (August 1st) and the Cyber Resilience Act. Are your connected devices facing complex dual compliance requirements?

This technical webinar, conducted in partnership with IS Laboratory (security assessment organization), gives you all the keys to navigate serenely in this new regulatory landscape.

---

Detailed Program

Module 1: RED directive breakdown

• Articles 3.3(d)(e)(f): new essential requirements
• Harmonized standards EN 18031: scope and restrictions
• Concerned equipment: connected IoT, wearables, communicating toys
• Compliance process: self-assessment vs notified body

Module 2: Cyber Resilience Act in practice

• Manufacturer obligations: secure by design, updates, documentation
• Products with digital elements: definition and classification: who is concerned?
• RED-CRA coordination: avoid duplications, optimize compliance
• Deadlines and transition period

Module 3: Technical solutions

• Secure firmware: Zephyr RTOS, ESP32 IDF, STM32 implementations
• Secure OTA updates: mcuBoot, cryptographic signature
• Network architecture: communication protection, authentication
• Concrete use cases: LoRa sensors, Bluetooth objects, industrial systems

Module 4: Interactive Q&A session

• Technical questions with PICODEV experts
• Regulatory aspects with IS Laboratory
• Personalized advice for your projects

---

Your trainers

PICODEV - Technical expertise

25 years of IoT firmware development

• Stéphane MASSON, founding CEO: technology enthusiast, embedded systems expert
• Specialized engineering team: Zephyr RTOS, ESP32, STM32, secure architectures
• Project references: Legrand (Linux iMX8 distribution), DualSun (solar regulation), LAQI (circadian lighting)
• Mastered technologies: bare metal firmware, RTOS, power consumption optimization, secure OTA

IS Laboratory - security analysis laboratory

European expertise laboratory for cybersecurity

• Complete regulatory expertise: RED, CRA, European directives
• Testing laboratory: security tests, compliance assessments
• Certification support: from risk analysis to CE declaration
• Specialties: radio equipment, industrial IoT, consumer connected objects

Target audience

This training is aimed at IoT professionals facing 2025 compliance challenges:

• Firmware developers: integrating security requirements into code
• R&D managers: compliance implementation planning
• IoT project managers: certification management
• Technical directors: product strategy and regulatory risks

Prerequisites: Basic knowledge of embedded systems and IoT. No cybersecurity expertise required.

---

Practical information

Duration: 1h (presentation + interactive Q&A) Format: Online webinar with real-time interaction Platform: Microsoft Teams (link sent 24h before) Language: French

Limited seats: Maximum 50 participants to ensure quality exchanges

---

Contact and information

PICODEV Email: contact@picodev.fr Phone: +33 (4) 42 54 52 71 Website: https://www.picodev.fr

IS Laboratory Website: https://www.is-laboratory.com/

---