Think Cybersecurity Now

The Cyber Resilience Act (CRA) is an EU regulation to strengthen the cybersecurity of products with digital components. It obligates manufacturers of products and systems to implement “security by design” and provide comprehensive updates throughout the entire product lifecycle. It will take full effect in December 2027.

The Machinery Regulation (EU) 2023/1230 supplements this by defining cybersecurity as a means of preventing the compromis of safety-relevant functions, thereby ensuring that functional safety is maintained.

SIGMATEK has been working intensively for some time to further develop its cybersecurity architecture and is preparing its automation products to meet future regulatory requirements.

In doing so, the following objectives are pursued:

1. Secure development processes that systematically avoid vulnerabilities and comply with security standards.

2. Embedding “security by design” and “security by default” in all products – without compromising the systems' real-time capability, determinism, and functional safety.

3. Enabeling the secure integration of SIGMATEK components into heterogeneous customer environments through:

> Protection mechanisms at the communication, access, and operating system levels

> A clear separation of responsibilities between the component manufacturer, the machine builder, and the operator

4. Ensuring product security throughout the entire lifecycle and support period, including:

> Secure firmware updates and patching mechanisms

> Security strategies for legacy and existing systems

5. Promoting security awareness throughout the entire supply chain.

In our “CRA: Cybersecurity White Paper,” we share practical insights on how we integrate cybersecurity into our automation products. A key methodological foundation is the assessment of cyber exposure using exposure levels (EL0–EL4) and the associated security measures. How can SIGMATEK components be securely integrated into a wide variety of customer environments, and what technical protective measures are necessary at the communication and operating system levels?

We are happy to support you in the transformation process to systematically reduce cyber risks in industrial applications while meeting the requirements for availability, performance, and functional safety in connected industrial environments.