Euchner USA

Xabier Antolin: Yes. Anyone who views the CRA as solely a matter for the IT department underestimates its scope. The regulation applies to products with digital elements and thus to their development, manufacturing, and maintenance. In mechanical engineering, therefore, it’s not just IT managers who are affected, but also design, product management, purchasing, quality management, documentation, and service. This is an important shift in perspective. Cybersecurity is becoming a product characteristic. Companies must not only protect their own networks but also assess the risks a product may pose, how it is intended to be used, and the limits for safe operation.Xabier Antolin: First and foremost, clear reporting channels are needed. Customers, security researchers, or partners need to know who to contact if they discover a potential vulnerability. Internally, there must be established procedures for how a report is reviewed, assessed, and forwarded to the appropriate departments. A ...