{"id":12626,"date":"2026-09-09T09:49:17","date_gmt":"2026-09-09T07:49:17","guid":{"rendered":"https:\/\/middex.de\/cra\/"},"modified":"2026-09-10T15:50:23","modified_gmt":"2026-09-10T13:50:23","slug":"security","status":"publish","type":"page","link":"https:\/\/middex.de\/fr\/security\/","title":{"rendered":"Security"},"content":{"rendered":"\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

CYBER RESILENCE ACT (CRA)<\/h1>

Digital products, connected devices, and software-defined systems are now a central component of modern industrial and business processes. At the same time, security requirements for such products are increasing significantly. With the Cyber Resilience Act (CRA), the European Union is establishing, for the first time, a uniform legal framework for the cybersecurity of products with digital elements.\u00a0The objective is to ensure that cybersecurity is not considered only after deployment, but is integrated from the very beginning into development, manufacturing, operation, and maintenance.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

WHAT IS THE CYBER RESILIENCE ACT?<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

The Cyber Resilience Act is an EU regulation that establishes mandatory minimum requirements for the cybersecurity of hardware and software products. It applies to so-called \u00ab\u00a0products with digital elements\u00a0\u00bb- products that can be directly or indirectly connected to a device, network, or digital service. This includes simple connected devices as well as complex industrial systems, control units, software components, and applications.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

WHY IS IT IMPORTANT FOR USERS?<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

For users, the CRA provides greater transparency and a higher level of security when using digital products. Manufacturers will be required to demonstrate that their products meet fundamental cybersecurity requirements, that risks have been assessed, and that vulnerabilities are managed throughout the product lifecycle. This is intended to ensure that products are delivered more securely, updated more effectively, and documented in a more traceable manner.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

WHAT DOES THIS MEAN FOR MANUFACTURERS AND PRODUCT DEVELOPERS?<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

The CRA requires manufacturers to systematically integrate cybersecurity into their processes. This includes, among other things, risk-based product development, secure default settings, appropriate update and patch mechanisms, vulnerability management, and comprehensive technical documentation.

The approach follows the principles of \u00ab\u00a0secure by design\u00a0\u00bb and \u00ab\u00a0secure by default\u00a0\u00bb. In other words, security must be considered from the product concept phase onward and must be effective in the standard product configuration.

Outlook: Security as a Quality Attribute<\/b>
The Cyber Resilience Act clearly demonstrates that cybersecurity is becoming an integral part of product quality. This creates an opportunity for companies to build trust, reduce risks, and future-proof their product development. Organizations that address cybersecurity early can meet regulatory requirements more efficiently while delivering genuine added value to their customers.

CRA at Middex<\/b>
As a development partner for electronic assemblies, systems, and technical solutions, Middex supports companies in integrating regulatory and technical requirements into product concepts at an early stage. Our goal is to combine functionality, security, and practical usability from the initial idea through development to documented implementation. The Cyber Resilience Act is not merely a regulatory obligation, but a key building block for robust, trustworthy, and long-lasting products.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

GUIDELINES & LEGAL INFORMATION<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\n\t\t\t\t\t
European Union Cyber Resilience Regulation <\/div><\/span>\n\t\t\t\t\t\t\t\n\t\t\t<\/path><\/svg><\/span>\n\t\t\t<\/path><\/svg><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

The Cyber Resilience Act establishes harmonized cybersecurity requirements across Europe for products with digital elements. Further information on the regulation and its scope of application can be found in the official publications of the European Union.<\/p>

EU-Cyberresilienz \/ Overwiew<\/b><\/a><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t\t

\n\t\t\t\t\n\t\t\t\t\t
BSI \/ Technical Guideline <\/div><\/span>\n\t\t\t\t\t\t\t\n\t\t\t<\/path><\/svg><\/span>\n\t\t\t<\/path><\/svg><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

The \u00ab\u00a0Bundesamt f\u00fcr Sicherheit in der Informationstechnik (BSI)\u00a0\u00bb promotes information security in the digital age through prevention, detection, and response measures for government, industry, and society. As Germany’s national cybersecurity authority, the BSI plays a key role in shaping and supporting secure digital transformation.

As part of its approach to Cyber Resilience Act (CRA) compliance, Middex has taken relevant BSI recommendations and technical guidelines into consideration when designing and implementing cybersecurity-related processes and measures.<\/p>

BSI \/<\/b>Technical Guideline<\/b>\u00a0BSI TR-03183<\/b><\/a><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t\t

\n\t\t\t\t\n\t\t\t\t\t
Coordinated Vulnerability Disclosure (CVD) Policy <\/div><\/span>\n\t\t\t\t\t\t\t\n\t\t\t<\/path><\/svg><\/span>\n\t\t\t<\/path><\/svg><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

At Middex, we take cybersecurity and the responsible handling of reported vulnerabilities very seriously. Every submitted report is carefully reviewed and processed within an appropriate and timely framework. Where possible, reporters will be kept informed about the progress of the investigation and remediation activities. To enable efficient assessment and accurate classification of reported issues, we ask that this reporting channel be used responsibly and only for relevant, verifiable, and well-substantiated information.

Scope:\u00a0<\/b>This policy applies to products, software components, systems, and technical solutions developed and maintained by Middex.
Contact Language: <\/b>Please submit security-related reports and inquiries in English. This helps us ensure clear, consistent, and timely communication and review.
Contact:\u00a0<\/b>For vulnerability reports, questions, or suggestions regarding product security, please contact us at:<\/p>

product-security@middex.de<\/a><\/p>

or submit an anonymous report using the form below:<\/p>\n

\n

<\/p>

    <\/ul><\/div>\n
    \n
    \n<\/fieldset>\n