Özer Koray Akdemir turns cybersecurity regulation into engineering work on connected products, and into the evidence that assessors ask for. He first did this when the regulation was still new and its interpretation was forming. The deadline was fixed, and the work ended in an approval audit.
ISO 24882 is at the same stage now: a new standard, a fixed legal date and little practical guidance. The Bridge Pack is the structure he would give a machinery team in that situation.
What he brings to ISO 24882
| What ISO 24882 asks for | Where the experience comes from |
|---|---|
| A risk assessment with threat scenarios (draft clause 5) | Threat analysis and risk assessment for connected products, from concept to production |
| Secure software updates and protected software | Architecture for signed software updates over the air, with code signing, key management and PKI |
| Secure communication and control units | Security requirements for embedded control units, including the safe reaction when secured communication fails |
| Suppliers and components | Cybersecurity requirements for suppliers and checks of what they deliver |
| Evidence for the technical file | Evidence prepared for approval audits and presented to assessors |
Before product cybersecurity, he spent many years on embedded systems, cryptographic systems and secure communications. That background shows in the pack, which treats security as a property of the whole machine: the controller, the gateway, the app, the cloud service and the people who service it.
Why the pack exists
Machinery manufacturers are preparing for 20 January 2027 with a standard that is not yet final. Many have already built a Machinery Regulation file. The pack answers the question they ask next: how much of ISO 24882 do we already meet, and what exactly is left?
Principles
- Every record maps to provisions of the law and clauses of the draft standard.
- Standards are cited by number only; no standard text is reproduced.
- The pack helps you organise the work. It does not certify a machine or confirm that it conforms.
Education and frameworks
- M.Sc. in Electronics and Multimedia Signal Processing, Tampere University of Technology.
- B.Sc. in Electrical and Electronics Engineering, Bilkent University.
- Works with IEC 62443, ISO/SAE 21434, ISO 27001, UNECE R155 and R156, NIS2, the CRA and the Machinery Regulation.