How to Develop Safe Products in a Connected World

April 7, 2025

Why cybersecurity is non-negotiable in the age of IoT

“The ‘S’ in IoT stands for security.”
– Magnus Alinder, Head of Cybersecurity Management, Bosch R&D Center Lund

Every product that connects to the internet becomes a potential target for cyberattacks — whether it’s a car, a router, or a bicycle. As we enter an era of 20+ billion connected devices, the stakes have never been higher.

“At Bosch R&D Center Lund, we connect Bosch products, applying AI- and then we make them secure.”

Security Is Not Optional

Cybersecurity is often seen as an add-on. It’s not.

“It’s a core function that needs to be built into the development lifecycle – from design to production and beyond. For a small company, a single vulnerability can lead to reputation loss or even business failure.”

Real-world examples show how critical this is.

“A now-infamous Jeep hack allowed attackers to remotely control the vehicle on a highway – without being anywhere nearby. Similarly, a Shimano gear-shift was hacked using a man-in-the-middle attack.”

It’s not science fiction. It’s happening – and more and more frequently.

How We Build Security into Our Products at Bosch

At Bosch R&D Center Lund, cybersecurity is part of everything we do, Magnus Alinder explains:

  • We follow a complete and well defined security engineering process
  • We train our teams – from product managers to developers – in secure coding practices
  • We review and analyze our code through static code analysis, coding standards, and peer reviews
  • We secure our assets during production – not just during design
  • We maintain security over time – patching vulnerabilities throughout the entire product life cycle
  • We define a security baseline – and monitor it regularly

What is secure today may not be secure tomorrow. The cybersecurity landscape changes constantly – with new vulnerabilities emerging every day.

Preparing for What’s Next

The upcoming Cyber Resilience Act (expected to be enforced in the EU by 2027) will make secure design and lifecycle management a legal requirement for connected products. That means businesses – big or small – must have processes and documentation in place to prove they are actively securing their products.

“You will pay for security, one way or another. The real question is: how, and when?”

Join Us at Ideon Science Park

Bosch invites you to join our upcoming Cybersecurity Sessions at Ideon Science Park – open for startups, engineers, and product teams looking to strengthen their security know-how:

📅 May 21 – Cybersecurity for Managers:
Learn how to integrate a security engineering process, defining security concept and integrating requirements into your product development. Book time with a cybersecurity lead and bring your toughest product-related questions.

📅 September 24 – Cybersecurity for Engineers:
Explore hands-on security strategies, from penetration testing to secure code architecture. Book time with a cybersecurity lead and bring your toughest product-related questions.

Find more information on our event calendar

Secure your product. Protect your users. Stay competitive.
Let’s build a secure future, together.

Want to know more? Reach out to:
Magnus Alinder – magnus.alinder@se.bosch.com
Pär Olsson – par.olsson@se.bosch.com

More news