When a Machinery Retrofit Makes You the Manufacturer
You add a new robot to an existing machine, replace the old control system with a connected one, or increase the cycle rate. To you, this is a modernization. Legally, …
EU Cybersecurity Regulation, Standards, and Certification
Secure Development Lifecycle Requirements under the CRA
Few terms come up as often in discussions of the Cyber Resilience Act as “security by design”, and few are misunderstood as often. Security by design is not an attitude, …
ENISA Secure by Design and Default Playbook
On July 30, 2026, ENISA published the Secure by Design and Default Playbook. It translates 22 security principles into checklists, evidence, and release criteria. It also maps them to the …
Why Security Levels Do Not Add Up Like Safety Integrity Levels
The same equation comes up in project meetings again and again. A product reaches SIL 2, so it also needs SL-C 2, and both describe roughly the same level of …
When In-House Developments Fall under the CRA
“This doesn't affect us, we don't even sell the software.” Compliance managers often hear this when the Cyber Resilience Act (CRA) comes up in connection with products developed in-house. The …
European Commission Publishes Guidance on the CRA
On July 27, 2026, the European Commission published its guidance on applying the Cyber Resilience Act (C(2026) 5252). It is aimed at manufacturers and other economic operators who need to …