top of page
Engineering Blog for High Performance Insights


The Role That Doesn’t Transfer - CRA manufacturer obligations across acquisitions, carve-outs, rebrands and insolvency
EXECUTIVE BRIEF. This article discusses the impact when manufacturers of CRA impacted products transition. The EU Cyber Resilience Act hangs every obligation on a single role, the manufacturer, and says almost nothing about what happens when the company holding that role is sold, split, rebranded or wound up. In operational technology, where assets outlive the companies that made them, that silence is a liability someone is already carrying. Usually it is the buyer, and usua
Scott Ludwick
5 days ago4 min read


Launching a Tech Startup?
NEP SERVICES BRIEF: Nexus Engineering Partners offers services to ensure the success of your startup. In this article we explore those services and Nexus Engineering Partners (NEP) unique abilities to ensure startup success. The Debt that Founders Miss Industrial and safety-critical startups rarely fail because the core idea was wrong. They fail, or get repriced, because of decisions made in the first eighteen months by people optimising for the next demo rather than the ev
Scott Ludwick
Oct 411 min read


CRA for Industrial Protocols - A Critical Comparison
SECURITY BRIEF: CRA secure-by-default essential requirement through the lens of protocols that the device supports. Protocol security does not behave like a product property. Every industrial protocol that has added cryptographic protection — PROFINET Security Classes 2 and 3, CIP Security on EtherNet/IP, the OPC UA secure channel — protects a session, and a session needs two capable endpoints. The security a plant actually achieves is set by the least-capable peer in each re
Scott Ludwick
Sep 196 min read
bottom of page