NIST SP 800-63-4 Rethinks Password Rules
In July 2025, the National Institute of Standards and Technology (NIST) published Revision 4 of its Digital Identity Guidelines (SP 800-63). The guidelines are the result of an almost four-year …
EU Cybersecurity Regulation, Standards, and Certification
Penetration Testing for Machine Builders and IIoT Products
Penetration tests show machine builders and manufacturers of connected industrial products where their systems can be attacked before an attacker finds out. Production plants are increasingly networked, industrial internet of …
How the CRA and the Machinery Regulation Overlap
Status note (October 13, 2026): This article describes the situation in May 2025, and its facts are as of that date. Two points have moved on since then. The CRA's …
ISO 8102-20 Cybersecurity for Elevators, Escalators, and Moving Walks
As elevators, escalators, and moving walks become more connected and digital, they also become exposed to cyberattacks. The standard ISO 8102-20 was developed to address this. It sets sector-specific cybersecurity …
What Changed with IEC TS 63074
IEC 63074, “Safety of machinery – Security aspects related to functional safety of safety-related control systems”, deals with security aspects of functional safety in machinery. It has changed significantly. It …
ISO/IEC 42001 as a Management System for Artificial Intelligence
As more industries use artificial intelligence (AI), the demand for clear rules and guidance grows. Companies must develop and use AI systems responsibly, securely, and efficiently. The standard ISO/IEC 42001 …