Engineering Blog for High Performance Insights

CRA Article 14 compliance for manufacturers

POSITION NOTE: Through EU legislated CRA (Cybersecurity Resiliency Act) scope is product level, efforts are made to assert compliance by way of systems architecture - will this assertion hold water? We explore this question. In late 2025, EtherCAT Technology Group consortium announced that its protocol meets the requirements of the EU Cyber Resilience Act. The initial statement, from the EtherCAT Technology Group, was carefully qualified — the protocol was said to meet IEC

The European Union is advancing its approach to cybersecurity with the introduction of the Cybersecurity Resiliency Act. This legislation aims to strengthen the security of digital products and services across the EU, addressing the growing threats in an increasingly connected world. For organizations operating within or with the EU, understanding how to conduct a thorough risk assessment under this act is essential. This guide breaks down the key elements of the EU Cybersecu