Cyber-Security Workshop - Cyber Resilience Act (CRA) and Machinery Regulation online

What do I need to do on my machine and control system to practically implement the cybersecurity requirements of the CRA?

Cybersecurity Fundamentals and Regulatory Requirements

• Overview of relevant directives and regulations
  • Cyber Resilience Act (CRA)
  • Machinery Regulation (EU) 2023/1230
  • NIS2 Directive (EU) 2022/2555
• Relationship between the Cyber Resilience Act (CRA), the Machinery Regulation, and CE marking
• Who is affected by the Cyber Resilience Act?

Product Lifecycle and Vulnerability Management

• Product lifecycle in the context of the CRA
• Vulnerability management in accordance with CRA requirements
• Security advisories and reporting channels for security vulnerabilities
• Fundamentals of a Software Bill of Materials (SBOM)

Risk Assessment and Security-by-Design

• What is a Threat and Risk Analysis (TRA)?
• Risk assessment as the foundation for Security-by-Design and Security-by-Default

Security Features of the HEIDENHAIN Control System

• User management and role-based access control
• Network architecture and network segmentation
• Firewall configuration and port access control
• Available network protocols and secure communication
• Operating system protection mechanisms
• Handling USB devices and residual risks

Participants will gain an understanding of the requirements of the Cyber Resilience Act (CRA) and learn how these can be practically implemented using the security features of HEIDENHAIN control systems.

• Understand the responsibilities of manufacturers, integrators, and operators
• Securely configure and utilize the security features of HEIDENHAIN control systems
• Identify and implement measures to enhance cybersecurity in machine tools

• Machine manufacturers (OEMs)
• Service and retrofit providers
• System integrators
• Automation engineers
• Personnel responsible for IT (Information Technology) or OT (Operational Technology) systems used to control machines and processes
• Service technicians and commissioning engineers

• Basic knowledge of operating a HEIDENHAIN control system
• Basic understanding of networking and industrial communication (recommended)