Harmonized standards for the Cyber Resilience Act explaining EN 40000-1-1 (terminology) and EN 40000-1-2 (Principles for Cyber Resilience). Background and regulatory context The Cyber Resilience

The Cyber Resilience Act (CRA) regulates the security of products with digital elements in the EU. Learn about scope, manufacturer obligations and CE marking. Scope

First horizontal CRA standards are available. prEN 40000-1-1 and prEN 40000-1-2 define the cross-product framework for risk management and cybersecurity activities. Horizontal before vertical —

ETSI publishes CRA standards covering routers to virtualization. The drafts set out concrete requirements and testable security measures, with all details summarized. Overview of published

An end to divergent standard interpretations: the TeleTrusT Industrial Firewall Profile clarifies IEC 62443-4-2 to enable consistent assessments. A methodological template for other product categories.

The new EU AI Act explained in plain language. Learn what the AI regulation means for your products and how to implement the requirements successfully.

All key questions about the Cyber Resilience Act (CRA) clearly answered. Learn what the EU regulation means for your company and how you can prepare.

Learn about EN 50742, the standard for protecting machines against tampering and cyberattacks in line with the requirements of the Machinery Regulation (EU) 2023/1230. Goals

The EU Data Act fundamentally changes how product data is handled. Learn the key requirements and how to prepare your company. Scope of the Data

Defense in depth, threat modeling, penetration tests and more — learn what IEC 62443-4-1 requires from the development process. This article summarizes the main concepts,

Overview of the EU NIS-2 directive: scope, concrete requirements, reporting obligations and relationship to the Cyber Resilience Act. Scope of NIS 2 The NIS-2 directive

Cybersecurity becomes mandatory in machine engineering. Learn the concrete requirements of the new EU regulation and how to implement them. Importance of cybersecurity for machines

Overview of ISASecure certifications including SDLA, CSA, ICSA, SSA and ACSSA. Learn about their requirements and typical application areas. ISASecure and IEC 62443 ISASecure is

Learn how the Cyber Resilience Act affects open source software. Obligations for FOSS stewards, risk categorization, and the CRA’s impact explained. Special treatment of FOSS

UK PSTI at a glance. New cybersecurity rules for connected products — discover the scope, main requirements, and conformity evidence. Legal basis of the PSTI

Product marking for Great Britain: UKCA replaces CE. Learn about its scope, how it works and the current transition arrangements. Background to the introduction The