"Industry must prepare for the new European regulatory framework that will be compulsory in 2027"
CYBER RESILIENCE ACT (CRA): European Regulation (EU) 2024/2847 on Cybersecurity brought together around one hundred professionals involved in the manufacture of industrial equipment
Jesús Valero, Managing Director of TECNALIA and Carlos Nazabal, Managing Director of CERTINALIA kicked off this event on 26th May at the Euskalduna Conference Centre in Bilbao.
Jesús highlighted the urgency faced by the industry to prepare for the new European regulatory framework that will be compulsory in 2027.
- Ion Marqués, Cybersecurity Technical Manager at CERTINALIA, stated that "the CRA requires manufacturers to ensure traceability, active surveillance and continuous compliance throughout the entire product life-cycle".
- Then, Mikel Vergara, Head of Cybersecurity Assessment at TECNALIA, pointed out that "aligning the CRA with standards such as IEC 62443 will enable security by design to be showcased by means of verifiable evidence".
INGETEAM Case Study
One of the highlights of the conference was the presentation of the INGETEAM case study, presented by Aitz Amezaga and Mario Elvira, along with Mikel Badiola (CERTINALIA):
- The practical application of IEC 62443-4-1 and IEC 62443-4-2 in industrial products was detailed.
- CERTINALIA presented INGETEAM with the first IEC 62443-4-1 and 4-2 accredited certificates, consolidating the company as a benchmark in industrial cybersecurity.
The conference concluded with a round table in which Imanol García (INGETEAM), Jon Arregui (AFM Cluster), Guillermo Unamuno(SPRI) and María Penilla (ZIUR) participated, analysing the application of CRA and IEC 62443 in sectors such as energy, advanced manufacturing, automation and smart infrastructures.
They all agreed that collaboration between notified bodies, technology centres and manufacturers will be key to successfully fulfil the new European regulatory framework.