IoT Security and Embedded Systems

Chairpersons welcome and opening remarks

As IoT deployments scale from smart factories and critical infrastructure to connected products and intelligent cities, cybersecurity has become one of the defining challenges of the connected economy. Threat actors are becoming more sophisticated, regulations are tightening, and enterprises are under growing pressure to secure increasingly complex device ecosystems.

In this analyst-led session, Satyajit Sinha, Senior Principal Analyst at IoT Analytics, will provide a data-driven assessment of the current IoT cybersecurity landscape and examine the trends that will shape its future. Drawing on the latest market research, real-world case studies, and industry benchmarks, he will explore how organizations are responding to evolving cyber threats, the impact of emerging regulations, and the technologies transforming IoT security strategies.

Cyber-Physical Systems face escalating risks from fragmented data, expanding attack surfaces, and operational complexity that can lead to costly downtime, safety hazards, and compliance failures. Addressing these challenges requires a unified, AI-ready data architecture that federates and correlates data across domains and environments at scale, transforming raw telemetry into enriched, contextual intelligence. This foundation enables the CISO’s strategy drawing for continuous observability and agentic operations that automate threat detection, investigation, and response with precision and speed, reducing alert fatigue and operational costs. By integrating comprehensive visibility, trusted AI-driven analytics, and orchestrated workflows, organizations can proactively predict and prevent threats, accelerate incident response, and enhance resilience across IT, security, and operational domains in a scalable, governed manner.

As Cyber‑Physical Systems (CPS) become deeply embedded in industrial operations, healthcare, transport, and critical infrastructure, the risks extend far beyond data breaches—cyber incidents can now trigger real‑world safety hazards, equipment failures, and major operational disruption. For CISOs, the expanding attack surface created by legacy OT, complex system interdependencies, and insecure protocols means that securing CPS is no longer a technical challenge alone but a strategic imperative requiring close alignment between cybersecurity, engineering, and operational teams.

The CRA arrived on 11 September 2026. Many vendors are concerned about the additional regulatory burden. Although the EU provides additional guidance and support, the practical work still appears complex and resource-intensive. This short presentation will explain how tooling and automation can reduce effort, eliminate unnecessary steps and shorten the time it takes to achieve a reasonable declaration of conformity.

This session explores how modern embedded and connected devices establish secure identities and maintain trusted operation in the field. It covers secure provisioning, hardware‑rooted identities, certificate lifecycles, and the mechanisms used to protect firmware, AI models and system state during runtime. Through practical examples across industrial, automotive and IoT deployments, attendees will learn how identity and runtime protection form the foundation of trustworthy autonomous and intelligent systems.

A forward‑looking presentation on how embedded systems are evolving as the physical world becomes increasingly intelligent. This session examines the shift toward edge compute, emerging microcontroller architectures, tiny ML, new power‑efficient designs and the role of embedded engineering in autonomous infrastructure.

A technology provider explains how to co‑optimise silicon, firmware, memory and peripheral interfaces to support next‑generation embedded workloads including sensing, lightweight AI inference and high‑reliability control loops.

An engineer discusses toolchains for firmware development, testing, code quality, automation and lifecycle support. The discussion includes cross‑compilers, simulators, emulators, build systems, reproducible firmware builds and how embedded teams adopt DevOps‑style workflows.