EU Cyber Resilience Act

The Cyber Resilience Act (CRA) affects all companies offering products with digital elements (PDEs) in the EU, regardless of their location. Siemens is affected as well, collaborating with customers, industry partners, and relevant stakeholders is key to addressing the CRA’s challenges collectively.

Understanding the Cyber Resilience Act

In today's rapidly evolving digital landscape, the frequency and sophistication of cyber attacks are on the rise. Many products, originally designed without internet connectivity in mind, are now vulnerable to new threats. Responding to these challenges, the EU has introduced the CRA, a regulation designed to elevate cybersecurity standards and protect our digital world.

Standards to increase tomorrow's cybersecurity

At Siemens, cybersecurity is not just a priority – it’s a fundamental part of our DNA. We take the protection of our products, solutions, services and customer data very seriously. Therefore, we have been investing continuously and proactively in robust cybersecurity measures for many years. Of course, we comply with all applicable regulations from the moment they come into effect.

How Siemens prepares for the CRA

The CRA presents both a challenge and an opportunity for European businesses, and Siemens is no exception.

While we recognize the complexities introduced by the CRA, we are committed to turning these challenges into a pathway for reinforcing our dedication to cybersecurity.

To navigate these challenges, we are taking proactive steps to enhance our risk management and information-sharing practices. If necessary, this involves enhancing internal policies and procedures, as well as embedding new regulatory requirements into the lifecycle of our products, solutions, and services.

We are diligently monitoring and analyzing the CRA's impact on our portfolio and operations. Our streamlined processes are designed to adapt efficiently, ensuring compliance while actively addressing regulatory demands. Our goal is to identify and mitigate potential threats and ensure smooth CRA compliance. We will keep customers informed of relevant updates as we align products and processes with evolving regulations.

How-Siemens-prepares-for-the-CRA-mhero-1280x720

Overview of the EU Cyber Resilience Act

The Cyber Resilience Act introduces EU-wide cybersecurity requirements for products with digital elements (PDEs), that are made available on the EU market regardless of where they are manufactured or whether they are sold or free of charge. It applies to manufacturers, importers, and distributors, and covers the entire lifecycle of a product – from development to the end of support. The CRA also includes remote data processing solutions that enable PDE functionality, such as mobile apps for IoT devices, but excludes standalone websites and cloud services like SaaS that are not linked to a PDE.
For detailed information on the CRA and to ensure proactive preparation, visit the EU website.

EU Website for CRA

Our offerings for the Cyber Resilience Act

Leverage Siemens' comprehensive cybersecurity solutions and expertise to effectively manage risks, secure your innovations, and ensure lasting cyber resilience. We are your partner for a secure digital transformation.

Cybersecurity for Industry specific portfolio

Explore the Cybersecurity for Industry specific portfolio in the context of EU CRA. The solutions and offerings protects your knowledge and systems at all levels. As a manufacturer ourselves, we understand the importance of cybersecurity for our own factories and know how to best implement it.

Discover the solutions

Visit Industrial cybersecurity

Get consulted by our Siemens Advanta experts

Siemens Advanta helps its clients comply with the CRA by incorporating the secure-by-design principle into the development of its products. Our proactive approach strengthens compliance and boosts customer trust and market competitiveness.

Get in contact

Get-consulted-by-our-Siemens-Advanta-experts-mhero-1280x720

Stay informed

Further information about the Cyber Resilience Act

We collected additional information on the Cyber Resilience Act for you.

Impact of the CRA on crane design

On-demand Webinar
Access our on-demand webinar, "Transform Crane Data into Your Competitive Advantage," to discover how crane optimization impacts production and improves processes. Learn how to use generated data to improve performance and maintenance and how the Cyber Resilience Act affects crane design.

Watch the webinar

Leveraging-the-CRA-for-enhanced-cyber-resilience-mhero-1280x720

Beyond compliance: leveraging the CRA for enhanced cyber resilience

White paper
The Siemens Advanta whitepaper provides a deep dive into the essential components of the CRA, highlighting the importance of integrating risk management and risk handling practices within your organization. As compliance becomes a top priority, learn how our specialized risk management services can protect your digital assets.

Download the free white paper