Back ZIUR brings the implications of the Cyber Resilience Act closer to the leading machine-tool manufacturers in the Basque Country

2026 / 07 / 02
Fundazioak Europako araudi berriaren eragina sektorean aztertzeko eta I+Gko arduradun teknikoei haren ezarpenak dakartzan erronka eta aukera nagusiak azaltzeko AFMk antolatutako jardunaldi batean parte hartu du.

ZIUR brings the implications of the Cyber Resilience Act closer to the leading machine-tool manufacturers in the Basque Country

The foundation took part in a workshop organised by AFM to analyse the impact of the new European regulation on the sector and to explain to technical R&D managers the main challenges and opportunities arising from its implementation

ZIUR participated in a workshop organised by AFM Advanced Manufacturing Technologies to bring the implications of the Cyber Resilience Act (CRA) closer to technical R&D managers from some of the leading machine-tool manufacturing companies in the Basque Country. The session, held on 2 July at the facilities of IZADI Mecanizados, brought together 14 professionals from a dozen companies in the sector to gain a deeper understanding of the scope of the new European regulation and its technical and business implications.

ZIUR’s Managing Director, María Penilla, provided an overview of the current status of the CRA, its main requirements and the challenges it poses for manufacturers of products with digital components. During her presentation, she explained how the regulation affects the machine-tool sector and recalled that “if a product requires cloud services to function normally, those functionalities also fall within the scope of the Cyber Resilience Act.”

She also shared the main challenges that ZIUR identifies in organisations during the adaptation process, including difficulties in interpreting regulatory requirements, lack of traceability between controls and evidence, non-homogeneous manual assessments, limited visibility of maturity levels, complex integration with development processes and, in particular, vulnerability management.

“The Cyber Resilience Act should not be understood solely as a new regulatory obligation, but also as an opportunity to integrate cybersecurity into product development and strengthen the competitiveness of our companies in an increasingly demanding market”, highlighted María Penilla.

In this regard, Penilla recommended adopting a broad view of the regulatory landscape. “The growing body of European regulation creates overlaps between different obligations. Having a clear mapping of the applicable regulations and their associated requirements helps optimise efforts and facilitate compliance,” she said.

Penilla also presented ENISA’s Single Reporting Platform (SRP) as a tool for reporting cybersecurity incidents in the European Union’s Digital Single Market, and encouraged companies to approach CRA implementation from a strategic perspective, reflecting on the evolution of their business models and the impact that product-related services will have.

In addition to presenting the key aspects of the Cyber Resilience Act, ZIUR introduced the CRA Acceleration Project promoted by the Provincial Council of Gipuzkoa to help companies in the territory adapt to the new European regulatory framework. The initiative provides specialised support to address the technical and organisational challenges posed by the CRA and to advance its implementation in a structured way. More than half of the companies attending the workshop —seven out of the twelve participating companies— are already part of this programme, reflecting the sector’s commitment to anticipating new cybersecurity requirements.

The workshop concluded with an exchange of experiences among the members of AFM’s Technical Committee, who shared impressions and discussed current issues of interest to the sector, further strengthening this space for collaboration and knowledge exchange among machine-tool manufacturers in the Basque Country.

Collaboration with AFM

Participation in this workshop forms part of the ongoing collaboration between ZIUR and AFM to promote cybersecurity in the Basque manufacturing industry and support companies in addressing new regulatory challenges. Through awareness-raising initiatives, training activities and specialised advisory services, both organisations are working to strengthen the preparedness of the machine-tool sector in an increasingly demanding regulatory environment and to enhance its competitiveness.