ISO/IEC 19790 Crypto Module Day will be presented on Tuesday 28 March, prior to the EU Cyber Act Conference. Click here for the complete agenda.
Conference Day 1
09:00 Introduction and Welcome (P10a) Wouter Slegers, CEO, TrustCB, Netherlands
9:10 Association Keynote: Cybersecurity Everywhere—Deciphering the EU’s Cyber Resilience Ecosystem (P10b) Cecilia Bonefeld-Dahl, Director General, DIGITALEUROPE, Belgium
09:40 Industry Keynote: The Cloud Security Compliance Ocean—European Cloud Market Access (P10c) William Ochs, CSO Cisco SD-WAN, CEO Kanji Security, Kanji Security / ENISA AHWG, United States
| Outlook/Opportunities (L11) |
| Moderator: Tomislav Nad, Lead Innovation Technologist SGS, Austria |
10:50 Regulatory Compliance for Consumer Devices: An Industry-Driven Initiative (L11a) Carlos Serratos, IoT Certification Expert, NXP, Netherlands
11:20 Trust in Digital Identities Managed by Mobile Devices (L11b) Matthias Schwan, Senior Principal Security & PKI, Bundesdruckerei GmbH, Germany
11:50 Securing User Interactions at the Device Level for High Assurance Use Cases (L11c) Fabien Courtiade, Director for Product Management, Qualcomm, France
| IoT Challenges (I11) |
| Moderator: Wouter Slegers, CEO, TrustCB, NetherlandsCommon Criteria Expert, France |
10:50 Leveraging Common Criteria for Products’ Security Specification (I11a) Sylvain Guilley, CTO, Secure-IC, France
11:20 Medical Devices Security: How to Utilize Existing Standards to Achieve Compliance and Prepare for Upcoming Harmonized Certification (I11b) Anna Prudnikova, Team manager – Products Certification, Secura, Netherlands
11:50 IoT—Compliance and Defiance (I11c) Jo Dalton, Associate Partner, Head of Europe, Pen Test Partners, United Kingdom
13:20 How Many People in the World are Using CC Certified Products? (L12a) Markus Bartsch, Business Development, TÜV Informationstechnik GmbH, Germany
13:50 Cybersecurity and AI: A Play in Two Acts (L12b) Tomislav Nad, Lead Innovation Technologist SGS, Austria
14:20 EU5G Developments (L12c) Alex Leadbeater, Head Global Obligations Futures and Standards, BT, United Kingdom
| Public Policy (B12) |
| Moderator: Matthias Intemann, Head of Branch Certification, Federal Office for Information Security – BSI, Germany |
13:20 An Update on ENISA Cybersecurity Certification Activities (B12a) Philippe Blot, Head of Sector Certification, European Union Agency for Cybersecurity (ENISA), France
13:50 Interplay of the CRA with Cybersecurity Certification Requirements Enacted in Other Vertical Legislation (NIS, CSA,…) (B12b) Alban Feraud, International Organizations & Regulatory Affairs, Strategy & Market Officer, IDEMIA Public Security & Identity, and VP, Eurosmart, Belgium; Pierre-Jean Verrando, Director General, Eurosmart, Belgium
14:20 Evaluating and Improving the NIST Cybersecurity Framework(B12c) Cherilyn Pascoe, Senior Technology Policy Advisor, National Institute of Standards and Technology, United States
| Standards for Success (S13) |
| Moderator: Dr. Igor Furgel, Head of Certification Body Deutsche Telekom Security, Germany |
15:30 Kickstarting the Patch Management Extension for CC (ISO/IEC 9569) (S13a) Sebastian Fritsch, Head of laboratory/ITSEF, secuvera GmbH, Germany
16:00 Vulnerability Management—An Important Aspect to Get Right (S13b) Staffan Persson, Co-Founder and Director, atsec information security GmbH, Germany
16:30 Better, Faster, Cheaper (S13c) Rasma Mozuraite Araby, Managing Director, atsec information security AB, Sweden
17:00 What Does it Take to Run a CB? (S13d) Wouter Slegers, CEO, TrustCB, Netherlands
| Public Policy (B13) |
| Moderator: Petra Manche, Global Certifications Team – Manager, Common Criteria, Cisco, United Kingdom |
15:30 NIAP Looking Forward (B13a) Shantel Powell, Deputy Director, NIAP, United States
16:00 Certification—Time is Also an Issue for Scheme Development (B13b) Matthias Intemann, Head of Branch Certification, Federal Office for Information Security – BSI, Germany
16:30 Operation Under EUCC – Everything You Need to Know as a Certification Body (B13c) Fritz Bollman, Head of Software Certification Section, Federal Office for Information Security, BSI, Germany; Klementina Geyer, Common Criteria Certification Expert, Federal Office for Information Security – BSI, Germany
17:00 Confidence in Cybersecurity, Can You Put a Label on it? (B13d) Katerina Megas, NIST IoT Cybersecurity Program Manager, U.S. Dept of Commerce, NIST, United States
18:30 Dine Around Brussels Enjoy an informal group dinner at one of Brussel’s top restaurants with your EU Cyber Security Act colleagues on Wednesday, 29 March. This is an add-on to the conference registration. For an additional fee you can reserve your seat for a prix-fixe dinner at a group table. Reserve early—seating is limited. On site, you’ll meet your group at 18:30 at the conference registration desk and depart from there.
Conference Day 2
| Standards for Success (S20) |
| Moderator: Tony Boswell, Senior Principal Consultant and Technical Manager, CyTAL Evaluation Laboratory, United Kingdom |
09:00 EU IoT: Why We Will Need FITCEM and SESIP (S20a) Georg Stütz, Security Certification Expert, NXP Semiconductors, Austria
09:30 Panel Discussion: CSA Speed and Consistency (S20b) Moderator: Tony Boswell, Senior Principal Consultant, CyTAL, United Kingdom Panelists: Roberto Cascella, Head Of Sector – Technology, Supply Chain & Strategic Autonomy, European Cyber Security Organisation (ECSO), Belgium; Ilias Chantzos, Global Privacy Officer and Head of EMEA Government Affairs, Broadcom, Belgium; Johan Klykens, Director of CCB-Certification, Centre for Cybersecurity, Belgium; Rosalina Porres Ortega, Area Head of the Laboratory and Product Certification Department, Entidad Nacional de Acreditación (ENAC), Spain [60MIN]
| Industrial Strategies (T20) |
| Moderator: Dominik Ziegler, Security Expert, Siemens |
09:00 How to Apply Pre-Silicon Testing in Certification? (T20a) Pascal van Gimst, VP Global Services Sales, Business Development, Riscure, Netherlands
09:30 Evolution of Cryptographic Evaluation in Europe (T20b) José Ruiz, CTO, jtsec Beyond IT Security, Spain
10:00 Opportunities and Challenges With the CRA from a Manufacturer’s Perspective (T20c) Marko Wolf, Chief Expert Product Cybersecurity Governance, Robert Bosch GmbH, Germany
| Cloud Frameworks (C21) |
| Moderator: Wouter Slegers, CEO, TrustCB, NetherlandsCommon Criteria Expert, France |
11:00 Connect the Dots…NIS2-CSA-EUCS (C21a) Anders Jonsson, SecureAppbox/Member of ENISA AHWG EUCS and VHWG, Sweden
11:30 Panel Discussion: EUCS (C21b) Moderator: Troy Leach, Chief Strategy Officer (CSO), Cloud Security Alliance, United States Panelists: Anders Jonsson, SecureAppbox/Member of ENISA AHWG EUCS and VHWG, Sweden; Thomas Niessen, Kompetenznetzwerk Trusted Cloud, German Ministry of Economics and Energy, Germany; William Ochs, CSO Cisco SD-WAN, CEO Kanji Security, Kanji Security / ENISA AHWG, United States; Bert Tuinsma, Independent, Netherlands [60MIN]
| Select Topics (I21) |
| Moderator: Martin Chapman, Chairperson, OASIS Open, United States |
11:00 IOT Smart Home Security Standards (Matter) (I21a) Preeti Ohri Khemani, Senior Director, Infineon Technologies, Austria
11:30 Meeting the Coming IoT Security Regulation with a Robust and Certified Silicon Root-of-Trust (I21b) Bruno Mussard, Security Marketing Manager, STMicroelectronics, France
12:00 Open Source and the Cyber Resilience Act (I21c) Mikael Barbero, Head of (Cyber-)Security, Eclipse Foundation, France
| Standards for Success (S22) |
| Moderator: Tony Boswell, Senior Principal Consultant and Technical Manager, CyTAL Evaluation Laboratory, United Kingdom |
13:30 How SESIP is Supporting European Goals of Building a Cyber Resilient Society (S22a) Georg Stütz, Security Certification Expert, Senior Principal at NXP Semiconductors, United Kingdom
14:00 Finally—The First Generic Certification Scheme to Address GDPR Art 42 Approved by the EDPB (S22b) Willy Fabritius, Global Head Strategy and Business Development, SGS, United States
14:30 Panel Discussion: Opportunities and Obstacles: The Industry’s Take on the EU Cyber Resilience Act (S22c) Moderator: Eloise Ryon, Senior Manager, Europe Digital Policy, Europe Operations, Schneider Electric, Belgium Panelists: Alexander Eisenberg, Head of Office EU Technical Market Access, B/S/H/, Belgium; Gisela Meister, Senior Security Consultant, Eurosmart, Germany; Carlos Serratos, IoT Certification Expert, NXP, Netherlands; Zoey Stambolliu, Senior Manager for Infrastructure & Security Policy, DIGITALEUROPE, Belgium [60MIN]
| IoT Challenges (I22) |
| Moderator: Peter Brown, Senior Adviser, Strategy and Innovation Unit European Parliament, Belgium |
13:30 Would You Still Trust Your IoT Product Supplier From Now On? (I22a) Roland Atoui, Managing Director, Red Alert Labs, France
14:00 Defense and Hardening of Billions of End-of-Life Internet-of-Things Devices—Solutions and Challenges (I22b) Andrei Costin, CEO/Co-Founder, Binare Oy, Finland
14:30 A Deep Dive Into New Technologies for IoT Cybersecurity (I22c) Jean Delesse, COO and Co-Founder, Trusted Objects, France
15:00 An Automated and Continuous Cybersecurity Re-Certification Solution for IoT (I22d) Shahid Raza, Director of Cybersecurity Unit, RISE Sweden | Associate Professor, Uppsala University Sweden, RISE Research Institutes of Sweden, Sweden
Exhibits close at 16:00.
16:00 Summary Panel Discussion: EU Digital Identity Wallets (P23a) Moderator: Alban Feraud, International Organizations & Regulatory Affairs, Strategy & Market Officer, IDEMIA Public Security & Identity, and VP, Eurosmart Panelists: Fabien Courtiade, Director for Product Management, Qualcomm, France; Chiara Giovannini, Senior Manager Policy & Innovation Deputy Director-General, ANEC, Belgium; Detlef Houdeau, Senior Director, Infineon Technologies, Germany; [60MIN]