Our world is becoming increasingly digital, which means that cybersecurity requirements are playing an ever greater role. With the Cyber Resilience Act (CRA), the Radio Equipment Directive (RED) and the Machinery Regulation (EU) 2023/1230, the European Union has launched three measures to protect companies and consumers from the growing threat of cyberattacks.
All three EU regulations require manufacturers to meet basic security requirements for products with digital elements and to provide transparent information about the security features of their products and regular security updates. While the Radio Equipment Directive (RED) specifically concerns devices with radio technology, the Cyber Resilience Act (CRA) extends these requirements and makes the specifications mandatory for all digital products. In addition, there is the Machinery Regulation (EU) 2023/1230, which obliges companies to protect security-relevant interfaces, components and software from cyberattacks from January 20, 2027.