CRA Workshop, New Machinery Regulation and IEC 62443: from standard to field practice

Cyberattacks on industrial systems are growing rapidly, and the European Union is responding with two regulations set to radically change the way connected machines are designed and sold: the CRA (Cyber Resilience Act), with the obligation to report vulnerabilities from 11 September 2026 and product security requirements fully enforceable by 11 December 2027, and the New Machinery Regulation (EU 2023/1230), fully applicable from 20 January 2027.

The CRA will also need to be applied in conjunction with other European directives such as ATEX and PED and their related automation systems.

Those who fail to comply risk not only penalties, but the blocking of CE marking and exclusion from the European market.

But what does 'design and operational execution security' really mean for professionals working in industrial and automation environments?

The speech will address the journey from regulation to its real-world implementation, illustrating how the reference IEC 62443 Standard becomes the operational tool for applying compliant risk analysis, policies and technical documentation, with a scalable and human-error-proof approach.

Through concrete application cases, we will see how machine manufacturers, system integrators and end customers can turn a regulatory obligation into a competitive and reputational advantage.