Cyberattacks, including those targeting industrial environments, have been on the rise for years. With the Cyber Resilience Act (CRA), the European Union is introducing a clear regulatory framework to strengthen cybersecurity and improve the resilience of digital products.
Cyber Resilience Act: New rules. New challenges.
In September 2022, the European Commission proposed the Cyber Resilience Act, introducing harmonized cybersecurity requirements for products with digital elements across the European Union.
While many of the CRA's product-related obligations are not yet fully applicable, the regulation has already entered into force. Since 11 September 2026, manufacturers have been subject to strict vulnerability and incident reporting requirements, including for certain products that were placed on the market before that date. The CRA will become fully applicable on 11 December 2027.
The requirements defined by the CRA apply to products with digital elements that are manufactured, imported or distributed within the European Union.
Which products and organizations are affected by the CRA? What are the consequences of non-compliance? How does the CRA relate to the NIS2 Directive, which also aims to strengthen cybersecurity but focuses on different areas of responsibility and risk management? These are key questions for the automation industry. Companies must understand and address the CRA's requirements, particularly as non-compliance may lead to enforcement measures, including significant financial penalties.
Your practical CRA update starts at the SPS
At the SPS, you'll meet experts from industry, cybersecurity and automation and gain valuable insights into the latest developments, best practices and practical approaches related to the Cyber Resilience Act.
The lecture program also offers hands-on guidance and expert perspectives on CRA compliance. Secure your ticket now and stay up to date on the latest CRA requirements.
Cyber Resilience: The end of your current digital products?
Wed, 25 November 2026 | 4:05 p.m. – 4:25 p.m. | Moises Lorenzo-Leon, HEITEC AG
With the CRAs coming into force, manufacturers of digital products face a new challenge: cyber security. How will the new regulation affect their current and future products?
CRA – From legal requirement to successful implementation
Wed, 25 November 2026 | 4:25 p.m. – 4:45 p.m. | Wolfgang Straßer, @-yet GmbH
This presentation demonstrates how machinery and plant manufacturers can implement these regulatory requirements in a practical, efficient and future-proof manner – from ‘security by design’ to CE conformity.
