Future Insights on Connected Products – AI, Law and Secure Development

Welcome to our seminars in Gothenburg, Stockholm and Linköping.

Connected products and AI open up major opportunities for growth and innovation – but they also demand close collaboration between security specialists, product developers, and legal professionals. In this unique seminar, we will explore how to successfully navigate this intersection by diving into key upcoming regulations and practical strategies for secure development.

You are most welcome to join our seminar and take the opportunity to meet and speak with leading experts in the field. Choose your preferred location when registering.

Scroll down to see the agenda for each location.

Information

Date

Stockholm, January 27th
Gothenburg, January 29th
Linköping, February 5th

Time

15.00–17.00

Location

Stockholm: Sveavägen 20
Gothenburg: Vikingsgatan 3
Linköping: Klostergatan 13

Cost

None – this event is free to join

27/1

Agenda: Stockholm

15.00 – Welcome and Introduction
Setting the scene: Åsa Schwarz and Penilla Sander from Knowit talk about why this conversation matters now.

15.05 – Opportunities and Challenges in Connected Products and AI
Speaker: Åsa Schwarz, Head of Strategy within Cybersecurity and Law, Knowit
Trends, risks, and what organizations need to prepare for.

15.25 – Regulatory Deep Dive: Cyber Resilience Act & AI Act
Speaker: Gustaf Johnssén, Senior legal consultant, Knowit
An integrated look at how these two major EU regulations will impact product strategy, compliance, and technical implementation.

15:50 – Coffee Break (15 min)

16:05 – Getting CRA'zy with product security
Speaker: Zhitao He, Innovation Manager / Security Architect, Assa Abloy
The CRA requires manufacturers to deliver secure-by-design products and handle newly emerged software vulnerabilities during the support period. These requirements put development teams under the pressure to keep up with security advisories of 3rd-party components. What processes and tools can help alleviate the pressure?

16:20 – Product Cybersecurity in a Global Enterprise
Speaker: Per Roos, VP Innovation & Technology, Epiroc

16:40 – Panel Discussion and Q&A
Experts from law, tech and security discuss what real collaboration looks like and answer your questions.

29/1

Agenda: Gothenburg

15.00 – Welcome and Introduction
Setting the scene. Martin Andrén from Knowit talk about why this conversation matters now.

15.05 – Regulatory Deep Dive: Cyber Resilience Act & AI Act
Speaker: Birgitta Landelius, Cybersecurity Consultant, Knowit
An integrated look at how these two major EU regulations will impact product strategy, compliance, and technical implementation.

15.30 – Navigating the CRAzy Seas: Our Journey to Cyber Resilience
Speaker: Martin Kastebo – Product Cybersecurity Officer
Martin will present Volvo Penta’s strategic approach to strengthening product cybersecurity, ensuring resilience and compliance with emerging regulatory frameworks.

15.45 – Coffee Break (15 min)

16.00 – CRA Implementation Strategy – Tool Ecosystem and Ways of Working to achieve Compliance
Speakers: Olliver Lund Mattson, Product Cybersecurity Manager, Emerson
Alexander Lindqvist, Cybersecurity Consultant, Knowit
Olliver and Alexander will present how Emerson has approached CRA from a technical perspective with respect to vulnerability management tools, ways of working covering a complex diversity of software products to meet CRA requirements.

16.20 – Open Source in R&D: Opportunity and Obligation
Speaker: Sami Myllykangas, Senior consultant, Knowit
A concise look at how open-source software shapes modern R&D. It's a way of accelerating development while introducing new security, compliance, and governance demands. We highlight key implications under the CRA and what pitfalls organization might face.

16.40 – Panel Discussion and Q&A
Experts from law, tech and security discuss what real collaboration looks like and answer your questions.

5/2

Agenda: Linköping

15.00 – Welcome and Introduction
Setting the scene: Why this conversation matters now.

15.05 – Opportunities and Challenges in Connected Products and AI
Trends, risks, and what organizations need to prepare for.

15.25 – Regulatory Deep Dive: Cyber Resilience Act & AI Act
An integrated look at how these two major EU regulations will impact product strategy, compliance, and technical implementation.

15:50 – Coffee Break (15 min)

16:05 – Beyond the AI hype – Lessons learned from setting up AI-ready development projects
Speaker: Olof Sundin, Director of Software Strategy, Saab Aeronautics
How are our development projects affected by the fact that we integrate AI components in our systems? Do we need completely new competences? New tools? Olof will give us an exclusive insight on conclusions drawn from real life development projects at Saab Aeronautics.

16:20 – Case Talk 2: TBA

16:40 – Panel Discussion and Q&A
Experts from law, tech and security discuss what real collaboration looks like and answer your questions.

Speakers in Stockholm

Per Roos

VP Innovation & Technology, Epiroc

Zhitao He

Innovation Manager / Security Architect, Assa Abloy

Specialized in cybersecurity assessments for IoT devices and provides strategic guidance on secure architectural design for new products. His work focuses on ensuring compliance with relevant regulations, including the EU RED and the Cyber Resilience Act, and aligning solutions with recognized European and international best-practice standards.

Gustaf Johnssén

Senior Legal Consultant, Knowit

Gustaf Johnssén is a Senior legal consultant with extensive experience of law pertaining to IT and information management. For over two decades he has worked with the legal aspects of access to and re-use of data, IT- and information related contracts, as well as other areas of IT law.

Åsa Schwarz

Head of Strategy within Cybersecurity and Law, Knowit

Åsa has over 25 years of experience in cybersecurity and is responsible for strategy at Knowit Cybersecurity & Law. She also serves on the boards of Enea and Precise Biometrics, is a fiction author and moderator, and regularly gives talks on cybersecurity.

Speakers in Gothenburg

Olliver Lund Mattsson

Cybersecurity Manager, Emerson

Olliver Lund Mattsson leads the cybersecurity processes and provides guidance on requirements and secure design at Emerson. Since the start of his career, Olliver has always had a passion for and been involved in cybersecurity regardless of role.

Martin Kastebo

Product Cybersecurity Officer, Volvo Penta

Martin has extensive experience in cybersecurity and leads product cybersecurity at Volvo Penta. He is actively involved in the ongoing standardization work for the Cyber Resilience Act and oversees the company’s implementation efforts. Cybersecurity by day, runner by night.

Birgitta Landelius

Cybersecurity Consultant, Knowit

Birgitta is a consultant specializing in information and cybersecurity. She has experience working with key EU regulations, including the Cyber Resilience Act (CRA), the Radio Equipment Directive (RED), and the NIS2 Directive. Birgitta focuses on cybersecurity legislation and has practical experience in product security, having contributed to the development of product cybersecurity management systems. She closely follows the latest legislative developments and supports organizations in navigating the increasingly complex landscape of regulatory requirements.

Sami Myllykangas

Senior Consultant, Knowit

Sami is a senior consultant focused on cybersecurity, compliance, and regulatory frameworks. In his recent assignment at Husqvarna, he has worked with Cyber Resilience Act (CRA) implementation and its implications for Open Source usage in products and development processes. With a background in ISO 27001, ISO 26262, risk management, and cross-functional process development, Sami helps organizations navigate complex requirements and translate them into practical ways of working.

Alexander Lindqvist

Cybersecurity Specialist, Knowit

Alexander is a cybersecurity consultant specializing in secure software development and the implementation of DevSecOps practices. He supports organizations in building and maintaining secure system architectures throughout the software development lifecycle. Alexander also has hands-on experience with the practical application of the Cyber Resilience Act (CRA), helping teams understand and meet its requirements.

Martin Andrén

Consultant Manager Cybersecurity, Knowit

Martin is a consultant manager specializing in cybersecurity and project management within the automotive industry. He has led multiple engagements related to the Cyber Resilience Act (CRA) and the Radio Equipment Directive delegated act (RED). Most recently, Martin has focused on product cybersecurity, supporting the development of product security management systems and guiding organizations in meeting CRA and RED requirements.

Speakers in Linköping

Olof Sundin

Director of Software Strategy, Saab Aeronautics

Olof Sundin has more than 25 years of experience from software development (including flight safety critical systems) in many different roles and organizations. He is currently responsible for software transformation and software strategy at Saab Aeronautics.