About Security & Standards
Security & Standards is a blog and knowledge hub on European cybersecurity regulation and product security.
It is written for manufacturers of machinery, industrial systems, components, software, and digital products who need to understand which requirements apply to them and what those requirements mean in practice for development, product management, quality management, and conformity assessment.
Cybersecurity regulation is demanding for manufacturers. The Cyber Resilience Act, the RED Delegated Act, NIS2, and the new Machinery Regulation reach deep into product development, organization, and technical documentation. At the same time, they refer to standards, use open terms, and leave room for interpretation.
Legal texts or abstract summaries therefore only go so far. What matters is translating them into specific requirements, processes, technical measures, and evidence that can be audited.
Security & Standards closes exactly this gap.
The focus is on the practical classification of regulatory requirements for manufacturers:
- Which requirements apply to which products?
- Which standards are relevant?
- Which processes and evidence are needed?
- Which technical measures make sense?
- How can the requirements be built into existing development processes?
The goal is to give clear, factual guidance to companies that need not only to understand cybersecurity regulation but to implement it.
The role of Secuvise
Security & Standards is run by Secuvise GmbH.
Secuvise supports European manufacturers with cybersecurity regulation and product security. The focus is on products with digital elements, embedded systems, machinery, industrial systems, and industrial components.
The work of Secuvise ranges from regulatory classification to practical implementation:
- Cyber Resilience Act and EN 40000
- RED Delegated Act and EN 18031
- Machinery Regulation and EN 50742
- IEC 62443-4-1 and secure product development
- Vulnerability handling and PSIRT
- Technical documentation and evidence of conformity
- Security testing and implementation support
Secuvise typically works with product management, development, product security, quality management, compliance, and CTO organizations.
The work centers on questions like these: Which requirements apply in your case? Which evidence is still missing? Which standards help with implementation? And how can the requirements be built into existing development and release processes without unnecessary overhead?
You will find detailed information about the company, its services, and its projects at secuvise.com. Security & Standards complements it as a technical reference on regulation and standards.
Book a call
Do you want to assess your situation and understand which next steps make sense for your company?
In a short call, we clarify which regulatory requirements apply to your products, where the typical gaps are, and which measures to prioritize now.
Your request goes directly to the Secuvise team.