How to Choose a CRA Consultant
We have met manufacturers who loaded all the offers for their CRA project into ChatGPT unread and asked which one was best. Others compared only the totals, although one offer …
Category - IEC 62443
Implementing IEC 62443-4-1 Processes That Development Teams Actually Use
The reporting obligations under Article 14 of the Cyber Resilience Act (CRA) apply from September 11, 2026. The remaining requirements apply from December 11, 2027. By then, many manufacturers will …
Security Test Grades in IEC 62443-4-1 and IEC 62443-4-2
Almost every manufacturer tests. Software composition analysis (SCA) runs in the build, alongside a static analysis (SAST) tool. A few in-house test cases run before release, and a procedure somewhere …
Why Security Levels Do Not Add Up Like Safety Integrity Levels
The same equation comes up in project meetings again and again. A product reaches SIL 2, so it also needs SL-C 2, and both describe roughly the same level of …
When IEC 62443 Certification Makes Sense under the CRA
Many manufacturers assume that the Cyber Resilience Act (Regulation (EU) 2024/2847), or CRA, forces them to get IEC 62443 certification. It does not. For a large share of products, the …
Choosing the Right IEC 62443 Security Level for Your Product
Manufacturers working with IEC 62443 often ask one question first: “Which security level does our product have to meet?” The short answer is that you do not decide this alone. …
TeleTrusT Industrial Firewall Profile for IEC 62443-4-2
Industrial security standards such as IEC 62443 set important frameworks, but they often remain too abstract for practical implementation. Different parties interpret identical requirements differently, which leads to inconsistent assessments …
Security Levels in IEC 62443 and How to Achieve Them
The IEC 62443 series sets cybersecurity requirements for industrial automation and control systems (IACS). One of its central concepts is the security level (SL), which defines graded levels of protection. …
ISO/IEC 27001 and IEC 62443 for Product Manufacturers
ISO/IEC 27001 and IEC 62443 are central standards for product manufacturers and for operators of IT and OT environments. They take different approaches to information security and product security, and …
IACS UR E26 and E27 for Ship Cyber Resilience
Shipping is becoming more digital and more connected. This brings many benefits, but also new risks. To address them, important cybersecurity rules have been introduced in recent years. Two central …