Gipuzkoa shares the commitment to cybersecurity as a competitive advantage
Around fifty companies from the mobility sector are analyzing the impact of the CRA on their products and processes at a conference organized by ZIUR and MUBIL, who are determined to support the Gipuzkoa industrial fabric in adapting to European regulations
Around fifty companies from the mobility sector analyzed the impact of the CRA on their products and processes at a conference organized by ZIUR and MUBIL, committed to supporting Gipuzkoa's industrial sector in adapting to European regulations. A large group of companies and industrial stakeholders from Gipuzkoa, especially those linked to the mobility and automotive sectors, met today at the MUBIL Center facilities in Eskuzaitzeta to delve into the impact that the imminent entry into force of the various European regulations, especially the Cyber Resilience Act (CRA), will have on their processes, products, markets, and after-sales service. Organized by the Gipuzkoa Industrial Cybersecurity Center (ZIUR) and the Smart and Sustainable Mobility Hub (MUBIL), both foundations supported by the Gipuzkoa Provincial Council, the conference ‘CRA Law in the Automotive Sector: From Regulatory Requirement to Competitive Advantage’ emphasized the necessary adaptability that Gipuzkoa's industrial sector will need as a competitive advantage to access or remain in the European market and build trust with customers and partners.
That cybersecurity is no longer just a technological issue, but a competitive advantage and a clear market variable, is demonstrated by regulations such as the CRA, which, starting in December 2027, will require compliance with specific cybersecurity technical requirements applicable to all connected industrial products and services, and the ability to demonstrate compliance with these requirements throughout their entire lifecycle. In this regard, Unai Andueza, Deputy for Economic Promotion and Strategic Projects, stated at the opening of the event that “the entry into force of the Cyber Resilience Act is an example of how the major challenges facing our industry can no longer be addressed in isolation. Gipuzkoa has spent years building strategic capabilities to anticipate these changes, promoting initiatives such as ZIUR and MUBIL, which are now collaborating to offer joint responses to challenges that directly affect the competitiveness of our companies. This ability to connect knowledge, technology, and industry is one of our main strengths and allows us to face market transformations from a position of greater preparedness and competitive advantage.”
A new regulatory framework that should not be viewed “only from the perspective of regulatory compliance, but as an opportunity to strengthen preparedness, differentiate oneself in the market, clarify responsibilities and improve the capacity to respond to cyber incidents,” said María Penilla, CEO of ZIUR, who, together with César Gutiérrez, CEO of MUBIL, led the event. Gutiérrez, for his part, added that “current mobility is already moving towards a connected, intelligent, and sustainable model, but it must also be secure. The CRA (Regulatory Action Plan) requires us to anticipate and integrate cybersecurity from the design stage, turning a regulatory requirement into an opportunity to innovate, build trust, and strengthen the competitiveness of our industry.”
First results of the ZIUR Acceleration Program
The event also served to present the first results of the new CRA Acceleration Program of the Provincial Council, promoted by ZIUR, which, with a budget of 3 million euros, aims to “support companies throughout the entire CRA adaptation cycle, facilitating, among other things, the evaluation of their connected industrial products or services.” In its first eight months, it has already begun 25% of the planned evaluations, up to 70 per year.
Alongside the regulation itself, Juan Rico, senior manager of the Oniro and Cloud programs at Eclipse Foundation, delivered a presentation entitled "Beyond the Code: How the CRA Redefines Software Responsibility and Resilience." His presentation delved into technical and specific aspects of particular interest to industrial companies, manufacturers, developers, and technology stakeholders in the sector.
The event also included several real-world case studies illustrating the practical impact of the regulation on businesses. Moderated by Unai Cenigaonandia of PwC, David Ramos of Loire Gestamp, Víctor del Pozo of Fagor Ederbatt, and Jon Ander Agirretxu of Orbik Cybersecurity, a roundtable discussion entitled "Challenges and Lessons Learned in the Mobility Industry in Product Evaluation for CRA Compliance" brought together participants to share their insights on the inevitable reality of CRA compliance. All agreed that it is essential to anticipate the requirements of CRA regulations to remain competitive in Europe. "Either you do things according to the regulations, or you're out of the market," María Penilla remarked at the close of the event, concluding with a recommendation.