Contact us TODAY to discuss the benefits of membership

Richard is Managing Consultant at Xitex Limited, which provides consultancy on defining and launching wired and wireless connected products with emphasis on creating secure IoT products and their secure supply chains. He has spent over 25 years in the electronics and communications sectors, having worked for Lucent Technologies, Sony, Cisco and also being a founding lead team member at startups Ubiquisys and nSine. At Ubiquisys and subsequently Cisco, after its acquisition of Ubiquisys in 2013, Richard was the Product Manager for their global cloud based activation system for 3G/4G small cells. This role being the security advocate, technology champion and secure manufacturing supply chain architect for the successful secure deployment of more than a million small cells manufactured in Europe and SE Asia. More recently he has been involved with taking various IoT products to market.

Joe has 30 years experience in the TIC industry, helping manufacturers of connected products get their products to global markets, both as an engineer and in business development. He has a background in EMC and EMF Exposure and presently leads the IoT and OT cyber activities for TUV SUD in the UK and the Nordics.

Mustanir is the Head of Cyber Product Assurance for Element’s Connected Technology business unit. He has been involved with helping manufacturers comply with worldwide legislation for over 15 years, with a particular focus on CE marking of products with software.

With a Master of Engineering degree in Electronics and Software Engineering, he started his career developing certified electronic instrumentation and communication equipment for the underground mining sector. Later, he moved into the world of testing and certification, initially specialising in electronic safety controls with embedded software before expanding into medical electrical equipment, lighting controls and other products with software.

He is now fully focused on cybersecurity and product compliance and has been helping IoT manufacturers navigate the PSTI, Radio Equipment Directive cybersecurity and Cyber Resilience Act requirements as they have emerged

The Road to Quantum-Ready IoT: Building Trust in the Post-Quantum Era

Quantum computing and artificial intelligence are poised to redefine the future of computing. While AI is accelerating the creation of increasingly intelligent systems, quantum computing has the potential to transform what is computationally possible while simultaneously challenging the cryptographic foundations that underpin digital trust. This session explores the journey from quantum computing fundamentals and post-quantum cryptography to the practical realities of building quantum-ready IoT platforms. The discussion examines the architectural tradeoffs of deploying post-quantum security in resource-constrained silicon, migration strategies from legacy to next-generation trust architectures, and how the convergence of AI, quantum computing, and IoT is reshaping the future of trusted connected systems.

Biography

Mohit Arora is Sr Director of Architecture & Product Security at Synaptics, where he leads architecture efforts for Edge AI and IoT platforms. He brings over 26 years of experience in design, architecture, security, and embedded systems, with prior leadership roles at AMD and NXP. At AMD, he served as Lead Security Architect focused on a high-volume gaming console SoC. Earlier at NXP, he was chief architect for a crossover family of processors targeting wearables and edge devices and led the security and power roadmap across the edge processing group. His core areas of expertise include low-power design, hardware security, and system architecture, among others. Mohit is also a published author of multiple books and holds several patents and technical publications.

Achieving Crypto-Agility and Quantum-Safe Readiness

Our digital world depends on cryptography. Quantum computing introduces new risks to traditional cryptography. Driving Enterprise-Wide Quantum Resilience across domains should be the primary focus. Enterprises need end-to-end support in discovering, transitioning, and governing Quantum-Safe Cryptography across your networks and estates. Quantum era has arrived. Delaying will only increase risks, retrofitting costs more, it is time to develop phased migration and protection plan now.

Biography

Yang is a seasoned Customer Success and Technology Sales leader with over 25 years’ experience in IT industry. He is an opportunity driven and result focused professional with proven track records in net-new / upsells / cross-sells, customer retention/renewals, portfolio expansion and repeated customer references.

The Good, the Bad, and the Non-Compliant: Real-World Data from SafeShark’s Testing Frontlines

The transition from voluntary security guidelines to mandatory legislation like, PSTI, RED and CRA has been a massive wake-up call for the consumer IoT industry. But beyond the regulatory text and policy discussions, what actually happens when devices hit the test bench?

In this session, SafeShark takes you behind the closed doors of our testing labs. Having conducted a large number of PSTI and RED assessments across a vast spectrum of connected products, we’ve seen it all; from exemplary security-by-design to critical, entirely preventable oversights. This talk cuts through the theoretical jargon to provide empirical, real-world data on how manufacturers are actually faring against the new regulatory baselines.

We will unpack the most frequent stumbling blocks, explore why certain requirements consistently trip up even mature engineering teams, and highlight strategies to help manufacturers pass quickly.

Biography

Jonathan Marshall is Director at SafeShark, supporting manufacturers, retailers and technology companies in navigating product cybersecurity requirements through practical, independent compliance testing and certification services.

Working across UK and EU legislation including the Cyber Resilience Act (CRA), RED and PSTI, SafeShark ensures organisations bring secure, compliant connected products to market with confidence.

With a wealth of experience in cybersecurity and technology businesses, Jonathan combines commercial expertise with a strong understanding of connected products, digital services and emerging regulation. Before joining SafeShark, he co-founded a number of successful technology ventures spanning media streaming and audience measurement.

Jonathan holds an M.Eng. in European Management, Music and Engineering from the University of Glasgow and is passionate about making cybersecurity compliance clear, accessible and commercially practical for businesses.

From Visibility to Verifiable Trust: Continuous IoT & OT Compliance in the Age of AI and Quantum Risk

As organisations become increasingly dependent on connected devices, cyber resilience is shifting from a network security challenge to a question of trust, identity, and continuous assurance at the device level. Across critical infrastructure, manufacturing, healthcare, automotive, and industrial systems, regulators and customers alike are demanding stronger evidence that connected assets are secure, authentic, and operating within defined cybersecurity policies.

This session explores how the industry is evolving beyond traditional visibility and monitoring approaches toward continuous trust and compliance models for OT environments. The presentation will examine why cryptographic device identity, lifecycle management, software transparency, and automated risk assessment are becoming essential foundations for modern cyber resilience strategies.

Using practical examples from connected-device environments, the session will discuss emerging approaches to identifying unmanaged assets, assessing software and certificate risk, correlating vulnerabilities against security frameworks, and continuously measuring exposure as systems evolve over time. It will also consider the growing role of AI in automating security analysis and policy evaluation, alongside the longer-term implications of quantum computing on device trust and cryptographic safety.
Rather than treating compliance as a periodic audit exercise, organisations are increasingly adopting continuous assurance models that combine operational visibility with measurable trust — helping bridge the gap between cybersecurity policy, resilience, and real-world connected systems.

Biography

Originally a founding-member of Device Authority Ltd, James has over 20 years’ experience in both internal and external facing technical roles. James leads the technology strategy and is the technical leader of the business, working closely with the engineering team to improve and develop its device security software platform – KeyScaler. James also works closely with a number of key customers and strategic partners to ensure our products fulfil current market requirements, are easy to integrate and use, and meet the IoT security use cases for key industry verticals – IoMT, IIoT, Automotive and Smart Connected Products.

Post quantum tales from the trenches

The race is on to achieve crypto agility and put post quantum systems in place by 2029. But implementations are still very new and rough around the edges. This talk will expose some of the obstacles encountered, and how they’ve been navigated. In particular, getting different implementations talking to each other correctly and hybridisation with existing elyptic curve based systems.

Biography

Chris Swan is an Engineer at Atsign, building their privacy and agentic security platform, with a focus on operations and supply chain security. He was previously a Fellow at DXC Technology where he held various CTO roles. Before that he held CTO and Director of R&D roles at Cohesive Networks, UBS, Capital SCF and Credit Suisse, where he worked on app servers, compute grids, security, mobile, cloud, networking and containers. Chris is an InfoQ Editor writing about cloud, DevOps and security, he co-hosts the Tech Debt Burndown Podcast and is a Dart Google Developer Expert (GDE).

Why aren’t our enterprises secure from cyber-attacks?

Understanding why our enterprises aren’t secure from cyberattacks underscores the critical role cybersecurity decision-makers play in addressing real problems to safeguard assets.

This session breaks down and explains how companies can vastly improve their infrastructure and avoid becoming another victim of ransomware, IP theft, and business disruption. Topics included address:

1. Brief introduction outlining evidence and current best practice
2. Can we really shut the door on critical data and IP theft from cyberattacks?
3. Overview of the existing technology to provide the necessary security
4. In practice, how would we do this, and why aren’t we?

Biography

Jeremy Flann, Vice President of EMEA, has over 25 years of experience in sales management and business development within the electronics industry, spanning from silicon technology to embedded software. He has worked at Green Hills Software since 2003 and leads a team of top-notch experts in solving the most complex software problems, supporting customers throughout Europe. Before joining Green Hills Software, Jeremy held marketing management roles at MIPS Technologies and Intersil. He has an MBA from the Cranfield School of Management and a degree in Physics with Electronics from the University of Nottingham.

Silicon Assurance and Tamper-Evident Supply Chains: Building Trust from Chip to Deployment  

As semiconductor supply chains become increasingly global, distributed, and strategically important, assuring the integrity of hardware has emerged as a critical challenge. Components may pass through multiple organisations, jurisdictions, and logistics environments before deployment, creating opportunities for tampering, substitution, counterfeiting, or loss of provenance. Yet organisations often have limited visibility into these risks and few practical mechanisms to evidence trust throughout a device’s journey. This presentation will examine the growing challenge of silicon assurance and transport integrity, highlighting why supply-chain trust is becoming a fundamental requirement for cyber resilience, critical infrastructure, and national security.

Biography

Isabela Radulescu is a technology and business leader driving partnerships, operations, and strategic growth at Ethicronics. She helped build the company from its early-stage foundations while studying at the University of Cambridge before joining full-time to support its commercial development and industry engagement.

Prior to Ethicronics, Isabela was a Tech Lead at Lloyds Banking Group, leading engineering teams delivering data, analytics, and AI platforms across multiple business units. Her experience spans technology delivery, innovation strategy, and ecosystem development across both large organisations and startups. She holds an MPhil in Management from the University of Cambridge and a First Class Honours BSc in Psychology from Durham University.

The Threat Model as Your Security Centrepiece  

Every team wants to threat model, knowing it holds real benefit in bringing security initiatives and engineering together. Few, however, have time or experience actually doing it.

This session shows how threat models become the centrepiece of security strategy, letting engineering teams deliver at pace while tracking assets, attack surface and controls as systems evolve. The clarity and unified understanding of security for systems rapidly increases speed to make engineering or architectural decisions and to gather data for compliance.

We’ll step through a live example in this session and showcase real examples of teams seeing these benefits through threat modelling.

Biography

As a former teenage hacker, Jonny has worked in software since the 2000s as engineer, security architect, and advisor to CISOs and CTOs. He has worked with major UK brands across banking, e-commerce, IoT, medical research, and defence. He founded Threatplane to bring risk-driven threat modelling to engineering teams building custom applications and connected systems. Jonny speaks regularly at conferences including DevSecCon and Infosecurity Europe, and is known for pragmatic, business-friendly security that keeps delivery teams moving without slowing them down.

Trusted Foundations for Memory-Safe AI: Hardware-Enforced Cyber Resilience for Critical Infrastructure 

As software-defined and AI-enabled systems become pervasive across Critical National Infrastructure (CNI), memory safety vulnerabilities are emerging as a primary source of cyber risk. This presentation explores how SCI Semiconductor is applying CHERI/CHERIoT technology to deliver hardware-enforced cyber resilience and trusted foundations for memory-safe AI in secure microcontroller architectures.

Using SCI’s ICENI platform as a case study, we demonstrate how capability-based security, compartmentalisation and least-privilege enforcement mitigate memory corruption, privilege escalation, malicious code injection and software supply chain attacks. Attendees will gain insight into how sovereign semiconductor innovation can establish trusted, resilient foundations for next-generation AI, edge computing and critical infrastructure systems.

Biography

Haydn Povey is CEO of SCI Semiconductors, and a veteran of the embedded design space. Starting his career at National Instruments, he was hired into Arm to lead the deeply embedded processors, leading the Cortex-M family and working across global silicon vendors to drive adoption of the new technology. At Arm he also owned the security technology portfolio, including TrustZone, that underpin security across mobile phone, automotive and industrial applications. Following Arm, he founded Secure Thingz, a successful security startup, which was purchased by IAR Ltd, the leading tools vendor, where he was Group Chief Strategy Officer for over 5 years.

Trust at AI Speed

AI-assisted development, open-source dependencies and tightening regulations are reshaping software supply chain security. This talk explains how organisations can secure proprietary software, OSS and internal applications across SCM, CI/CD pipelines, package ecosystems and execution platforms. It covers practical controls including SBOMs, attestations, code signing and build pipeline integrity, while highlighting current standards, regulatory drivers such as NIS and CRA, and remaining gaps. A key focus is the shift from manual, human-in-the-loop signing to human-on-the-loop governance: policy-driven enforcement that scales with AI-speed code generation while preserving trust, auditability and resilience.

Biography

Florian Lukavsky is Chief Innovation Officer at SignPath and has been active in offensive security for more than 15 years. As an ethical hacker, he has responsibly disclosed numerous zero-day vulnerabilities to vendors and conducted several hundred penetration tests and security reviews of IoT devices. Today, his focus is on securing software supply chains. At SignPath, he develops solutions that integrate Zero Trust principles into the software development process and help organizations effectively prevent supply chain attacks.

Preparing for the Quantum Era and the Age of AI

Governments and industry regulators have announced a global shift in data protection expectations to ensure the ongoing security of the information which powers our digital economies. NIST has taken a leading role in defining standards for the global transition to post-quantum security; whilst in the UK, the NCSC has published roadmaps for UK.plc and the FCA is leading the quantum agenda for the financial sector through the World Economic Forum. This presentation will explore how companies can strengthen their data protection against quantum risks and securely embrace AI innovation.

Biography

Adam McElroy brings over 25 years of security leadership experience to his role as Chief Technology Officer for Eclypses.
His role at the company is to bring the voice of the customer into all dimensions of the firm and ensure communications are relevant and impactful.

Prior to Eclypses, Adam was the Group Head of Cyber Risk for a European bank after a successful career in risk, advisory and technology innovation.

He has built international security teams across many industry sectors – including finance, critical infrastructure, government, and military – his impact has been recognised in multiple awards.

Secure Agentic AI, The Details Most Orgs Overlook

Overview of key components and interactions of agents that leave organizations vulnerable to a data breach or (friendly) replay attack.

Biography

Co-founder of NuDay AI, a secure, collaborative AI platform focused on regulated industries. He’s passionate about product development and delivery, product-market fit, and AI security. Bill’s background draws from a varied history of hands-on technical roles, architecture, marketing, and product management.

Adopting post-quantum security and memory safety best practice through open source

The current geopolitical climate coupled with new legislation like CRA is bringing to the top of many companies the need to protect their systems against cyberattacks. Fortunately, there has been a lot of development in the open to develop commercially ready technologies that can be adopted today. This can be done with minimal barriers and cost, so it has the ability to “raise all boats” when it comes down to cybersecurity. In this presentation I will cover lowRISC’s open source projects around OpenTitan (security IP) and CHERI (memory safety technology), and their latest developments in the area of PQC and new processor support. Both OpenTitan and CHERI technology from lowRISC already have got traction with UK’s semiconductor vendors and OEMs, and provide an opportunity for UK companies to lead in security.

Biography

Javier is the CEO of lowRISC, a non-profit with a mission to make open silicon a commercial reality, who runs active projects on secure and memory safe hardware. Previously, he was a VP and General Manager at Arm for over 8 years. Javier has worked in the semiconductor industry for over 25 years.

End-to-end Digital Assurance for Quantum Systems

Dynamic, principles-based assurance for complex, high-integrity systems is a new frontier in modern, digital assurance. This talk on the work of the Quantum Systems Engineering team at Loughborough explores the interplay between evolving technology and the operational and regulatory environments it operates in. Their recent Quantum Key Distribution (QKD) assurance project coincided with a significant shift in approach to Principles-Based Assurance (PBA) by the UK’s National Cyber Security Centre’s (NCSC). Unlike prevailing technology profile approaches, such as Common Criteria (CC), PBA specifies ‘what’ is to be achieved, not ‘how‘ to achieve it. NCSC sees PBA as a key enabler to the UK being a science and technology superpower by 2030.

Doing PBA is hard, doing it with confidence harder still, especially when it is new to so many and considering has significant enterprise-level implications. Applying principles rather than rules requires hands-on, brain-on engagement at senior level to determine what good looks like in context for every case. Similarly, assurance evaluation is less straightforward and requires more work to assess. Such a transition is not undertaken lightly, but is seen as essential for the future resilience and security of highly interconnected, dynamically reconfiguring systems that cannot be assured using rigid approaches.

Biography

Stephen is a systems engineer with a vision for a harmonious, interconnected world that understands how to use technology to break down barriers and bridge divides. As a Senior Research Associate at Loughborough University, he focuses on dynamic assurance of quantum systems. In 2025 he completed his PhD in Automotive Cybersecurity, which focused on modelling how enterprises with global impact can work together to deliver complex, high-integrity road vehicle systems that remain secure throughout their lifecycles.

His research demonstrates how rigorous modelling of business and engineering practices can contribute to improving the resilience of complex, software-intensive systems. His work is applicable to many types of high-integrity system that must remain secure throughout their lifecycle. He applies ontology engineering and model-based systems engineering (MBSE) methods to enterprise systems of systems comprising people, processes and technology.

Before academia, Stephen consulted on requirements-led engineering for international businesses. His background in safety-critical embedded software ranges from Formula 1, through automotive Tier 1, to OEM. He also ran a technical translation business for 12 years serving major German organisations.

In his spare time, Stephen volunteers with INCOSE and runs Robot Day (www.robotday.co.uk), a volunteer-led celebration of Science, Technology, Engineering, Arts and Mathematics (STEAM).

Dex Hunter-Torricke is a leading global thinker on AI and society, with two decades of experience at the intersection of technology and global power. His career includes key roles advising leaders including Elon Musk at SpaceX, Mark Zuckerberg at Facebook, Eric Schmidt at Google, and UN Secretary-General Ban Ki-moon. Most recently, he led global communications and marketing for Google DeepMind where he launched Gemini.

In February 2026 Dex launched the Center for Tomorrow, an urgent international effort focused on identifying the conditions to build successful societies in the age of AI. Dex argues that the key challenges of the AI era are not technical but societal, and that every organization, community and country must urgently transform to prepare for a radically different future.

Dex’s work has been covered by TIME, Politico, the Wall Street Journal and New York Times among others, and he is a frequent public speaker on issues of AI and society. Dex also serves as non-executive director on the board of HM Treasury. He is currently authoring his debut book.

From Research to Deployment: CHERI, the CHERI Alliance and the Next Wave of Secure Computing

CHERI is a hardware-based security technology that stops the most common and dangerous vulnerabilities (around 70%) from turning into serious cyber-attacks, without requiring developers to rewrite their code from scratch.

This talk will explain what CHERI is, why it matters now, and how the ecosystem is moving from research into practical deployment. It will introduce the role of the CHERI Alliance in accelerating adoption across industry, academia and government, and highlight recent progress including the launch of the CHERI Adoption Global Ecosystem Assessment Q1 2026, new ecosystem momentum through members such as Wind River, continued advances in CHERI for embedded systems, and growing government support for commercial uptake.

The session will also discuss what it takes to translate a breakthrough architecture into deployable products: standards, tools, software enablement, developer education, supply-chain collaboration, and credible business cases. Attendees will leave with a clear view of where CHERI is already creating value, where the main adoption opportunities lie, and why secure-by-design compute is becoming a strategic priority across the semiconductor and systems landscape.

Biography

Mike Eftimakis is the Founding Director of the CHERI Alliance, a non-profit industry organisation dedicated to accelerating adoption of CHERI technology worldwide. He has more than 30 years of international experience in semiconductors, processor IP, SoC design, embedded systems and business leadership. Over his career he has held senior technical and commercial roles at companies including VLSI Technology, NewLogic, Arm and Codasip, and has also founded and led his own company.

At the CHERI Alliance, Mike works with industry, academia and government stakeholders to build the ecosystem, strengthen collaboration, and help turn CHERI from a major research breakthrough into deployable secure computing products. He is a frequent speaker on hardware-enforced memory safety, secure-by-design systems, and the strategic role of semiconductors in cyber resilience.