Cyber Resilience Act: Your mobile app is about to become a CE-marked product

Description du talk
From December 2027, most commercial apps and software on the EU market will need a CE mark, just like a toaster or a router, and their makers already have to report actively exploited vulnerabilities. In this talk, I'll introduce the Cyber Resilience Act, explain why the EU created it, and show how it applies to mobile apps and software. We'll then walk through its main requirements, from the cybersecurity risk assessment to secure-by-default design, vulnerability handling, security updates, and SBOMs, so you leave knowing what the CRA means for the apps you build.

Speaker
Titouan Mesot
By day, I'm an OT Cybersecurity Consultant at CertX Solutions, helping companies meet cybersecurity standards and regulations, with nearly a decade of experience securing embedded Linux firmware for industrial devices.
By night, I help run the PETZI Federation's ticketing system, where I developed the initial Android scanner app and found my way into the mobile dev community.

Langue du talk
Talk in French or English depending on the audience.