The Good, the Bad, and the Non-Compliant: Real-World Data from SafeShark’s Testing Frontlines

The transition from voluntary security guidelines to mandatory legislation like, PSTI, RED and CRA has been a massive wake-up call for the consumer IoT industry. But beyond the regulatory text and policy discussions, what actually happens when devices hit the test bench?

In this session, SafeShark takes you behind the closed doors of our testing labs. Having conducted a large number of PSTI and RED assessments across a vast spectrum of connected products, we’ve seen it all; from exemplary security-by-design to critical, entirely preventable oversights. This talk cuts through the theoretical jargon to provide empirical, real-world data on how manufacturers are actually faring against the new regulatory baselines.

We will unpack the most frequent stumbling blocks, explore why certain requirements consistently trip up even mature engineering teams, and highlight strategies to help manufacturers pass quickly.

Biography

Jonathan Marshall is Director at SafeShark, supporting manufacturers, retailers and technology companies in navigating product cybersecurity requirements through practical, independent compliance testing and certification services.

Working across UK and EU legislation including the Cyber Resilience Act (CRA), RED and PSTI, SafeShark ensures organisations bring secure, compliant connected products to market with confidence.

With a wealth of experience in cybersecurity and technology businesses, Jonathan combines commercial expertise with a strong understanding of connected products, digital services and emerging regulation. Before joining SafeShark, he co-founded a number of successful technology ventures spanning media streaming and audience measurement.

Jonathan holds an M.Eng. in European Management, Music and Engineering from the University of Glasgow and is passionate about making cybersecurity compliance clear, accessible and commercially practical for businesses.