CRA, the Machinery Regulation and NIS-2 each require their own risk assessment. We explain what manufacturers, integrators and operators must do. In collaboration it often

Up to €30,000 for gap analysis, pentesting, or SBOM. Why machine builders should use the SECURE Open Call but not wait for the funding. What

CRA, the Machinery Regulation and NIS-2 each require their own risk assessment. We explain what manufacturers, integrators and operators must do. The tasks can be

Security test grades, test modules and pentests: how IEC 62443-4-1 and IEC 62443-4-2 regulate testing and what the Cyber Resilience Act requires. Two draft amendments

At least five years of free security updates for every product: the CRA makes this mandatory, with consequences for manufacturers and their suppliers. It boils

Support period, changes, spare parts, cloud connectivity — the CRA Guidance of the European Commission answers questions that have been open in the machinery and

The Machinery Regulation and the CRA apply in parallel to connected machines. Manufacturers should implement both requirements as a single project instead of duplicating work.

Which harmonised standards apply to the CRA? Overview of the EN 40000 series, ETSI EN 304 6xx and EN 50770 with a summary of structure,

Templates for IEC 62443-4-1 compared: what Exida, TÜV SÜD and the free sample process cover, where gaps remain and what the CRA requires. Exida –

Processes according to IEC 62443-4-1 can be set up in one to two months, but it often takes six to eighteen months before departments actually

Security test grades, test modules and pentests — how the new drafts of IEC 62443-4-1 and -4-2 regulate testing and what the Cyber Resilience Act

At least five years of free security updates per product: the CRA makes this mandatory, with consequences for manufacturers and their suppliers. It comes down

Templates for IEC 62443-4-1 compared — what Exida, TÜV SÜD and the free sample process cover, where gaps remain and what the CRA requires. Contents

Templates for IEC 62443-4-1 compared: what Exida, TÜV SÜD and the free sample process cover, where gaps remain, and what the CRA requires. Contents Exida

The CRA standard EN 40000-1-4 adopts 14 requirement families from EN 18031 and adds four new ones. This has concrete consequences for manufacturers who already

Reporting, monitoring, remediating: the CRA requires three distinct things. Only actively exploited vulnerabilities must be reported, and not every CVE has to be patched. This