The new Industrial CRA Position Paper* from the Industrial Cybersecurity Center highlights a critical need: adapting the European Cyber Resilience Regulation to the reality of OT environments. Critical infrastructures, legacy systems, decades-long life cycles, and the absolute priority of availability make it impossible to apply the CRA as currently designed. The document proposes a multisectoral guide that enables realistic, proportional compliance focused on operational security, establishing clear responsibilities among manufacturers, integrators, and operators, and ensuring that cyber resilience advances without compromising industrial continuity.
*Please note the document is in Spanish
Are you not yet a member of the Industrial Cybersecurity Center?
Register here.