Masterclass

Cybersecurity and Safety Risk Assessment for Connected Machines

Cyber Resilience Act (CRA) and Machinery Regulation: learn how both risk assessments interact and practise a structured cybersecurity risk assessment for your own products

Why cybersecurity is now your concern too

Connected machines and digital products make manufacturing more efficient, but also introduce cybersecurity risks. A cyberattack can interrupt operations, compromise safety, harm customers and damage trust. The Cyber Resilience Act (CRA) addresses cybersecurity across the lifecycle of products with digital elements, while the EU Machinery Regulation addresses machinery safety, including protection against corruption of safety-related control systems. Where cyber threats can affect machine safety, both risk assessments need to inform each other.


For whom?

  • Product engineers and R&D managers

  • OT managers and operations leads

  • System integrators and embedded solutions providers

  • Product managers responsible for compliance or lifecycle management

  • SMEs developing or integrating connected machines and digital products


Key insights

After this day, you will:

  • Understand how CRA product cybersecurity requirements and machinery safety obligations intersect, and where separate assessments are needed

  • Recognise common vulnerabilities and cyber-related safety concerns in connected and embedded products

  • Learn a structured approach to documenting cybersecurity risk assessment, selecting controls and recording residual risks

  • Identify the evidence and formal documentation needed to support product conformity and ongoing lifecycle responsibilities

  • Leave with practical priorities for improving product security and compliance readiness

  • Receive a certificate of attendance

 

Programme

The morning provides an accessible overview of cybersecurity requirements for manufacturers and integrators. The afternoon turns regulatory principles into a guided, practical risk assessment, including the interfaces with machinery safety analysis.

TimeSubject
TBC

Morning session: OT security, machinery safety and CRA compliance

  • OT cybersecurity fundamentals and typical attack paths in manufacturing
  • NIS2 relevance in industrial organisations and supply chains
  • Machinery Directive to Machinery Regulation: cybersecurity considerations where security affects safety
  • CRA scope, essential cybersecurity requirements and manufacturer responsibilities for connected products
  • How machinery safety and CRA cybersecurity risk assessments interact without replacing one another
  • Security by design, supply-chain assurance, updates and lifecycle management
 Lunch Break
TBC

Afternoon session: Structured cybersecurity and safety-related risk assessment

  • Defining the product scope, intended use, architecture, lifecycle and relevant regulatory boundaries
  • Identifying critical assets, safety-related functions, trust boundaries and credible worst-case scenarios
  • Analysing threats and vulnerabilities, including scenarios where cybersecurity failures create safety consequences
  • Evaluating exploitability and impact, determining risk levels and prioritising mitigation measures
  • Selecting security controls, documenting residual risk and identifying responsibilities for follow-up
  • Structuring the risk assessment report and supporting technical documentation: assumptions, traceability, decisions, evidence and links to applicable essential requirements
  • Understanding how risk assessment outputs feed conformity assessment, technical files, vulnerability handling and product maintenance

Registration

Please bring your laptop. By the end of the workshop, you will have practised a repeatable risk assessment method and know how to organise the key documentation and decisions needed for secure, compliant connected products.

 

Flemish companies can take advantage of a subsidy from VLAIO for this course

This programme is part of Industriepartnershap in which 13 Flemish innovation partners offer an integrated service to stimulate growth and innovation in the Flemish industry in the 6 following themes: AI, Cybersecurity, Circularity, Digitisation, Climate & Energy and Industry 4.0. They do so under the leadership of Agoria and Sirris and with the support of Agentschap Innoveren & Ondernemen.

Banner industriepartnerschap Sirris Agoria

Date

09 March 2027 | 09:00 - 17:00

Location

Sirris Kortrijk | House of Manufacturing

Graaf Karel De Goedelaan 7
8500 Kortrijk
Belgium

Google maps

Price

excl. VAT: Companies based in Flanders & Sirris member: € 407 | Companies based in Flanders (non-Sirris members): € 468 | Standard price: € 1358

Language

English

Status

Open

Experts

For all practical information, information on invoicing, location etc of this event, please contact our event manager 

adres events@sirris.be

Partners

Sponsored by

Date

09 March 2027 | 09:00 - 17:00

Location

Sirris Kortrijk | House of Manufacturing

Graaf Karel De Goedelaan 7
8500 Kortrijk
Belgium

Google maps

Price

excl. VAT: Companies based in Flanders & Sirris member: € 407 | Companies based in Flanders (non-Sirris members): € 468 | Standard price: € 1358

Language

English

Status

Open

Gelijkaardige activiteiten