©2026 Automation.com, a subsidiary of the International Society of Automation.
Navigating CRA
This column helps manufacturers, system integrators, and industrial end users understand and prepare for the European Union's Cyber Resilience Act (CRA). It features articles from industry experts, standards leaders, and practitioners. The articles explain what the CRA requires for products with digital elements, including secure-by-design development, vulnerability handling, software bills of materials, and incident reporting obligations. They also explain how the CRA relates to standards such as ISA/IEC 62443 and to regulations such as NIS2.
4 Results Found
-
Opinion
When EU Cybersecurity Regulation Crosses the Swiss Border
How will aligning Switzerland’s regulations with the CRA impact Swiss manufacturers and customers? -
Opinion
An Opportunity for Simultaneous Business Growth and Reduction of Cybersecurity-Related Risks
Manufacturers who build ISA/IEC 62443 into their secure development lifecycle can turn the EU Cyber Resilience Act into a passport to the European market and a stronger position worldwide. -
Opinion
The Cyber Resilience Act: Compliance Starts with Product Security, Not Documentation
Implementing the CRA is an opportunity to achieve higher levels of product security maturity by actively anticipating and preparing to address security issues that may arise throughout a product’s lifecycle. -
Feature
A Look at Two Cyber Reporting Processes: EU CRA and US CIRCIA
Cyber incident reporting is entering a new phase on both sides of the Atlantic.





