# #000: How New IoT Security Regulations Will Shape the Industry's Future

- Show: [Coredump Sessions](https://hardwarepodcasts.com/podcast/coredump-sessions)
- Published: 2024-09-17
- Length: 1h 03m
- Episode: 1
- Page: https://hardwarepodcasts.com/podcast/coredump-sessions/2024-09-17-000-how-new-iot-security-regulations-will-shape-the-industrys-future
- Listen: https://podcasters.spotify.com/pod/show/memfault/episodes/000-How-New-IoT-Security-Regulations-Will-Shape-the-Industrys-Future-e3195p0

## Summary

François Baldassari, founder and CEO of Memfault, and co-founder/CTO Chris Coleman discuss the impact of new IoT security regulations, specifically the EU's Cyber Resilience Act (CRA) and the US FCC's Cyber Trust Mark. They argue that OTA updates, Software Bill of Materials (SBOM) tracking, and device observability are now mandatory for compliance, moving security from an afterthought to a core engineering requirement. The hosts highlight that ignoring these regulations risks severe liability, citing recent pager explosions and Shimano bike shacker hacks as examples of physical dangers from insecure connected devices.

## Chapters

- [0:02](https://hardwarepodcasts.com/podcast/coredump-sessions/2024-09-17-000-how-new-iot-security-regulations-will-shape-the-industrys-future#t=2) Introduction: François Baldassari and Chris Coleman from Memfault
- [2:02](https://hardwarepodcasts.com/podcast/coredump-sessions/2024-09-17-000-how-new-iot-security-regulations-will-shape-the-industrys-future#t=122) The State of IoT Security: Legacy Chips and Vulnerable Protocols
- [13:28](https://hardwarepodcasts.com/podcast/coredump-sessions/2024-09-17-000-how-new-iot-security-regulations-will-shape-the-industrys-future#t=808) The Case for OTA Updates and Secure Boot
- [20:50](https://hardwarepodcasts.com/podcast/coredump-sessions/2024-09-17-000-how-new-iot-security-regulations-will-shape-the-industrys-future#t=1250) Overview of the EU Cyber Resilience Act (CRA)
- [20:50](https://hardwarepodcasts.com/podcast/coredump-sessions/2024-09-17-000-how-new-iot-security-regulations-will-shape-the-industrys-future#t=1250) CRA Requirements: SBOM, Observability, and Self-Certification
- [33:52](https://hardwarepodcasts.com/podcast/coredump-sessions/2024-09-17-000-how-new-iot-security-regulations-will-shape-the-industrys-future#t=2032) US Cyber Trust Mark vs. EU CRA: Voluntary vs. Mandatory
- [38:41](https://hardwarepodcasts.com/podcast/coredump-sessions/2024-09-17-000-how-new-iot-security-regulations-will-shape-the-industrys-future#t=2321) Preparing for Compliance: Open Source and Supply Chain
- [45:40](https://hardwarepodcasts.com/podcast/coredump-sessions/2024-09-17-000-how-new-iot-security-regulations-will-shape-the-industrys-future#t=2740) Lifecycle Support and Physical Security Risks
- [57:37](https://hardwarepodcasts.com/podcast/coredump-sessions/2024-09-17-000-how-new-iot-security-regulations-will-shape-the-industrys-future#t=3457) Observability in Low-Resource Devices and Multi-Chip Systems

## Topics

- [Security & privacy](https://hardwarepodcasts.com/topic/security-and-privacy)
- [Embedded firmware](https://hardwarepodcasts.com/topic/embedded-firmware)
- [Certification & compliance](https://hardwarepodcasts.com/topic/certification-and-compliance)
- [Sourcing & supply chain](https://hardwarepodcasts.com/topic/sourcing-and-supply-chain)

## Most relevant to

large enterprises

## Mentioned

- Memfault (company)
- Pebble (company)
- Zephyr (other)
- Nordic (company)
- Silicon Labs (company)
- ST Micro (company)
- Texas Instruments (company)
- Shimano (company)
- Cypress (company)
- FCC (company)
- NIST (company)
- Yocto (tool)
- MC Boot (tool)
- FreeRTOS (other)
- PSA Certified (other)
- Matter (other)

## Related episodes from other shows

- [The State of IoT Development | The Eclipse Foundation's Frédéric Desbiens | Internet of Things Podcast](https://hardwarepodcasts.com/podcast/iot-for-all-podcast/2024-12-17-the-state-of-iot-development-the-eclipse-foundations-frederic-desbiens-internet) (IoT For All Podcast)
- [515: Script Boomers](https://hardwarepodcasts.com/podcast/embedded-fm/2025-11-27-515-script-boomers) (Embedded.fm)
- [Breaking Embedded IoT Systems | Ken Munro, Partner at Pen Test Partners | #IoTMakers E036](https://hardwarepodcasts.com/podcast/iot-for-all-podcast/2019-08-07-breaking-embedded-iot-systems-ken-munro-partner-at-pen-test-partners-iotmakers-e) (IoT For All Podcast)
- [#407: Cybersecurity in MedTech: FDA Compliance, Patient Safety & the Hidden Risks You’re Missing](https://hardwarepodcasts.com/podcast/global-medical-device-podcast/2025-05-19-407-cybersecurity-in-medtech-fda-compliance-patient-safety-the-hidden-risks-your) (Global Medical Device Podcast)
- [What’s Driving Change in the IoT Industry? | Bsquare's Ralph C. Derrickson & Matthew Inglis](https://hardwarepodcasts.com/podcast/iot-for-all-podcast/2022-04-21-whats-driving-change-in-the-iot-industry-bsquares-ralph-c-derrickson-matthew-ing) (IoT For All Podcast)

## Citing this page

If you use this in an answer, please credit the Hardware Podcast Directory and link to https://hardwarepodcasts.com/podcast/coredump-sessions/2024-09-17-000-how-new-iot-security-regulations-will-shape-the-industrys-future. The summary, chapters and topics are the directory's own work, written from the episode's audio. The episode itself, its title and its audio belong to Coredump Sessions.