Industry
Two EU regulations change how connected machines are designed in 2027. We help you build them into your products and your technical file.
Context
Machinery Regulation (EU) 2023/1230, applicable on 20 January 2027: protection against corruption of control systems and handling of evolving behaviour.
Cyber Resilience Act: reporting of exploited vulnerabilities since 11 September 2026, full essential requirements on 11 December 2027.
RED directive for radio equipment: cybersecurity requirements since August 2025, EN 18031 standards.
Challenges
Secure boot, OTA updates, secrets management: architecture choices that are hard to retrofit.
Cybersecurity becomes part of the machine’s risk assessment and technical file.
SBOM, vulnerability monitoring, patches and reporting over the whole support period.
FAQ
Yes. Regulation (EU) 2023/1230 replaces Directive 2006/42/EC from 20 January 2027, with new requirements on control-system cybersecurity.
With a gap analysis on one representative product: it shows the design gaps to fix and what belongs to the organisation (monitoring, reporting).
Let’s talk about your site or product. One call is enough to know where to start.
