Hardware Podcasts

What is Device Lifecycle Management? | Northern.tech's Eystein Stenberg | Internet of Things Podcast

IoT For All Podcast · 3 Jun 2025 · 18m · Episode 377

What this episode covers

Eystein Stenberg, CTO and co-founder of Northern.tech, explains that device lifecycle management (DLM) is essential for OEMs transitioning to software-driven business models. He details the five stages of DLM—design, manufacture, commissioning, maintenance, and decommissioning—and argues that over-the-air (OTA) updates via tools like Mender are foundational for security and regulatory compliance, particularly under the EU Cyber Resilience Act. Stenberg highlights risks such as security vulnerabilities and fleet-breaking updates, while citing ZF Group as a customer leveraging Mender for autonomous vehicle management.

Most relevant to

companies scaling up

Topics

Mentioned

Companies
Northern.tech, ZF Group, Airbus, Lyft, Volkswagen, Siemens, Thales
Products
Mender, CFEngine

Related episodes from other shows

Other shows on the same ground, closest first.

  • Coredump Sessions · 58m

    #008: Navigating the Changing IoT Security Landscape: A Survival Guide for Product Leaders

    Giovanni Alberto Falcione, CTO at Exine, joins Memfault's François Baldassari and Thomas Sarlandie to discuss the impact of the EU's Cyber Resilience Act (CRA) on IoT security. They analyze the shift from voluntary standards like NIST 800-53 to mandatory compliance, highlighting the critical need for runtime security monitoring and Software Bill of Materials (SBOM) tracking. The conversation details how eBPF technology enables low-overhead anomaly detection and how OTA updates are essential for mitigating vulnerabilities in the field.

    Security & privacyEmbedded firmware
    6 chapters

  • Coredump Sessions · 1h 03m

    #000: How New IoT Security Regulations Will Shape the Industry's Future

    François Baldassari, founder and CEO of Memfault, and co-founder/CTO Chris Coleman discuss the impact of new IoT security regulations, specifically the EU's Cyber Resilience Act (CRA) and the US FCC's Cyber Trust Mark. They argue that OTA updates, Software Bill of Materials (SBOM) tracking, and device observability are now mandatory for compliance, moving security from an afterthought to a core engineering requirement. The hosts highlight that ignoring these regulations risks severe liability, citing recent pager explosions and Shimano bike shacker hacks as examples of physical dangers from insecure connected devices.

    Security & privacyEmbedded firmware
    9 chapters

  • The Next Byte Podcast · 55m

    209. Tom Zaubermann & The Cyber Threat(s) To Your Car

    Tom Zaubermann, a cybersecurity expert and SAE International instructor who previously worked at Volkswagen, explains why legacy automotive development models like the V-model are failing in the era of connected cars. He discusses the shift towards Over-the-Air (OTA) updates, the complexities of hacking multiple Electronic Control Units (ECUs) to compromise vehicle safety, and the critical need for OEMs to adopt Secure Software Development Lifecycles (SSDLC). Zaubermann advises consumers to check for bug bounty programs as an indicator of security maturity and highlights the regulatory push via ISO 21434 in Europe.

    Security & privacyCareers & education
    7 chapters

  • Coredump Sessions · 55m

    #019: END-OF-YEAR CELEBRATION: Moments You Loved, Stories You Missed, and 2026 Predictions You Need

    François Baldassari and Chris Coleman, co-founders of Memfault, reflect on the 20th episode of Coredump Sessions, highlighting lessons from guests like Nick Sinas of Oval, Dan Mangum of Golioth, and Chad from Gabb. They discuss the critical importance of Over-the-Air (OTA) updates, the rise of AI-assisted firmware development using tools like Claude and Cursor, and the evolving security landscape for devices from Pebble to modern smart rings. The hosts predict that 2026 will see OTA become a regulatory requirement and AI offload processing to the edge, while emphasizing the need for engineers to adapt to higher-level abstractions.

    Connected products & IoTAI & machine learning
    11 chapters

  • Coredump Sessions · 1h 01m

    #024: Shipping Firmware Under the CRA: Nicolas Schieli on the Questions Everyone’s Asking, and the Ones They Should Be Link:

    Nicolas Schieli, VP of Product Security at Nordic Semiconductor, joins François Baldassari and Chris Coleman to explain the EU Cyber Resilience Act (CRA) for connected products. They detail the immediate 24-hour vulnerability reporting requirements, the December 2027 compliance deadline, and the necessity of threat modeling, secure boot, and SBOMs. The discussion covers product classification, long-term support obligations, and how manufacturers remain responsible for their supply chain's security posture.

    Certification & complianceSecurity & privacy
    6 chapters

The summary, chapters and topics are generated from the episode’s audio by this directory, not written by IoT For All Podcast. The episode itself belongs to its publisher.