EU Cyber Resilience Act

[Robbie_B]

With the EU's new Cyber Resilience Act phasing in, is there any guidance regarding how this legislation will affect PROFINET devices? For example, will it become mandatory that all data is encrypted in transit, etc? Is there any official guidance from PROFIBUS and PROFINET International regarding how manufacturers of devices prepare to comply with the CRA?

[XSPN]

With the EU's new Cyber Resilience Act phasing in, is there any guidance regarding how this legislation will affect PROFINET devices? For example, will it become mandatory that all data is encrypted in transit, etc? Is there any official guidance from PROFIBUS and PROFINET International regarding how manufacturers of devices prepare to comply with the CRA?

PROFIBUS & PROFINET International (PI) has published official guidance on this topic. According to their latest press release, PROFINET already provides the foundational technical mechanisms required for CRA compliance, and manufacturers can extend existing devices step‑by‑step with additional security features depending on their risk assessment (e.g., Secure Cell, Secure Access, Secure Realtime). Full encryption of all traffic is not mandated by default but depends on the assessed security level and use case.
You can find the official PI statement here: https://www.profibus.com/newsroom/press ... compliance

[paaaz]

With the EU's new Cyber Resilience Act phasing in, is there any guidance regarding how this legislation will affect PROFINET devices? For example, will it become mandatory that all data is encrypted in transit, etc? Is there any official guidance from PROFIBUS and PROFINET International regarding how manufacturers of devices prepare to comply with the CRA?

PROFIBUS & PROFINET International (PI) has published official guidance on this topic. According to their latest press release, PROFINET already provides the foundational technical mechanisms required for CRA compliance, and manufacturers can extend existing devices step‑by‑step with additional security features depending on their risk assessment (e.g., Secure Cell, Secure Access, Secure Realtime). Full encryption of all traffic is not mandated by default but depends on the assessed security level and use case.
You can find the official PI statement here: https://www.profibus.com/newsroom/press ... compliance

The link parsing unfortunately does not work correctly. "-n e w s" gets alway replaced by "-The"
Short URL https://tinyurl.com/mrx2dk4n

And PNO, please upload a PDF instead of a .docx ....