Cybersecurity regulation is changing what it means to build and operate secure industrial products in Europe. With the Cyber Resilience Act (CRA) introducing lifecycle security requirements for products with digital elements, and NIS2 placing greater cybersecurity responsibilities on organisations themselves, manufacturers increasingly need to think beyond securing individual products towards building resilient companies.

In the opening episode of Season 3 of Innovating Trust, Steve Atkins talks with Maximilian Moser of VDMA, Germany’s Mechanical Engineering Industry Association, about what these changes mean for the machinery and plant engineering sector.

They discuss the shift from compliance to practical implementation, product and industrial security, vulnerability management, software supply chains and the challenge of maintaining security throughout increasingly long and complex product lifecycles. They also look at how regulation can become more than a compliance exercise — and potentially provide the foundations for greater resilience and trust across European industry.

Want to know more?
VDMA provides practical information, guidance and resources for companies responding to the Cyber Resilience Act and NIS2. You can explore its cybersecurity resources here: VDMA Cybersecurity — CRA, NIS2 and industrial security

Listen to ‘Innovating Trust’ on your regular Podcast platform;