10:00 AM – 10:25 AM
Integrated cybersecurity in OT: the impact of CRA/NIS2 and the application of IAM according to NE201
The increasing digitalization of industrial automation and process instrumentation brings new requirements in the field of cybersecurity. European regulations such as the Cyber Resilience Act (CRA) and the NIS2 Directive require organizations to no longer view cybersecurity as an optional quality aspect, but as an integral and legally required part of complete product and lifecycle management.
An important part of this development is Identity and Access Management (IAM). By implementing standardized processes for managing identities and access rights, both the integrity and availability of industrial systems can be ensured.
Recommendations such as NAMUR NE201 provide practical guidance for applying IAM to instruments. This guideline describes how identities, roles, and access control can be configured in a consistent and secure manner within industrial environments.
In summary, the combination of regulations, technological developments, and operational requirements demands an integrated approach to cybersecurity.