Cybersecurity resilience and regulatory compliance in digital product development

New architectural and regulatory frameworks are shaping the future of digital product security and resilience. The DevSecResOps model integrates secure software delivery, continuous monitoring, and reliable recovery into a unified operational model. This approach ensures that security, operability, and recoverability are designed and automated from the beginning, allowing organizations to manage attacks, failures, and misconfigurations effectively.

Simultaneously, the Cyber Resilience Act (CRA) is introducing new requirements for products with digital elements. Compliance involves managing the entire product lifecycle, including updates, vulnerability monitoring, and software bills of materials (SBOMs). Industry experts from Aaronn Electronic GmbH and congatec suggest that modular embedded architectures, such as Computer-on-Modules, can simplify CRA readiness by allowing for more structured platform migrations and long-term maintenance.