The talk examines the evolving legal and regulatory framework for management responsibilities in cybersecurity, with a particular focus on the EU Cyber Resilience Act (CRA) and the NIS2 Directive. It highlights how these instruments reshape expectations toward company leadership, including risk management, secure development processes, vulnerability handling, supply chain oversight, incident preparedness, and compliance structures. The talk will also address the intersection of cybersecurity obligations with the use of open source software.

 In addition, the talk provides an update on current developments regarding the European Digital Identity Wallet and the emerging concept of a European Business Wallet. These initiatives may significantly influence future trust infrastructures, authentication models, digital credentials, and secure machine-to-machine or business-to-business interactions in the European digital ecosystem.

 The session offers a legal and strategic perspective for practitioners, developers, managers, and researchers working on trustworthy, cybersecure, and functionally safe embedded systems.

Short Bio:

Dr. Thomas Lapp is an attorney-at-law and certified QVM mediator, specializing in information technology law as a Specialist Lawyer for IT Law. He serves as a board member of EDV-Gerichtstag (EDV-GT), is a member of the executive committee of davit, the IT law working group of the German Bar Association (DAV), and chairs NIFIS (Nationale Initiative für Informations- und Internetsicherheit). Dr. Lapp is a lecturer at Johannes Gutenberg University Mainz and Goethe University Frankfurt, and also teaches at the German Lawyers’ Academy and the German Attorneys’ Institute. He is a frequent speaker and author on IT law, cybersecurity, digital regulation, and related legal developments.