Free whitepaper (PDF)

Cyber Resilience Act for machine builders

Reporting obligations since 11 September 2026, all obligations from 11 December 2027: what applies to machines with a control system and data connection.

• Which machines the CRA applies to – in addition to the Machinery Regulation
• Reporting deadlines: 24 h, 72 h and final report
• Support period, security contact and user information under Annex II
• Checklist: what you should prepare now