Engineering Blog for High Performance Insights

PRODUCT SECURITY BRIEF: Why CRA Annex I fulfilment cannot be left to P&Ls and their engineering departments alone Annex I obligations attach to the manufacturer, a single legal entity, not to the P&L that happens to build the product. When divisions each interpret, implement and evidence Annex I on their own terms, the entity can accumulate several incompatible answers to questions the Regulation expects it to answer once. A market surveillance authority, a notified body or

PRODUCT SECURITY BRIEF. This article discusses the impact when manufacturers of CRA impacted products transition. The EU Cyber Resilience Act hangs every obligation on a single role, the manufacturer, and says almost nothing about what happens when the company holding that role is sold, split, rebranded or wound up. In operational technology, where assets outlive the companies that made them, that silence is a liability someone is already carrying. Usually it is the buyer, a

NEP SERVICES BRIEF: Nexus Engineering Partners offers services to ensure the success of your startup. In this article we explore those services and Nexus Engineering Partners (NEP) unique abilities to ensure startup success. The Debt that Founders Miss Industrial and safety-critical startups rarely fail because the core idea was wrong. They fail, or get repriced, because of decisions made in the first eighteen months by people optimising for the next demo rather than the ev

OT SECURITY BRIEF: We look into the security aspects of the recently introduced i3X 1.0 (Industrial Interoperability eXchange) In June 2026, CESMII froze version 1.0 of i3X — the Industrial Information Interoperability eXchange — and shipped it with an implementation guide, an OpenAPI definition, a Python client, a conformance test suite and an MCP server. Forty-four technology providers have publicly aligned behind it. The specification is small, MIT-licensed, and by severa

CRA Article 14 compliance for manufacturers