As Product and Tech\u00adnology Man\u00adager at Pilz, one of my tasks is to iden\u00adtify new tech\u00adnolo\u00adgies at an early stage and assess their poten\u00adtial for the com\u00adpany. Stim\u00adulus comes from areas with direct market access\/customer con\u00adtact, but sug\u00adges\u00adtions from other depart\u00adments are also incor\u00adpo\u00adrated. The aim is to develop research projects or product ideas from these trends. One aspect that\u2019s increas\u00adingly impor\u00adtant is the con\u00adsid\u00ader\u00ada\u00adtion of reg\u00adu\u00adla\u00adtory require\u00adments \u2013 in par\u00adtic\u00adular the Cyber Resilience Act (CRA).<\/p>\n\n\n\n
The CRA does not affect all our prod\u00aducts to the same extent. Many of our classic safety relays, such as the PNOZ X for example, are not affected by it at all \u2013 our cus\u00adtomers can con\u00adtinue to use them as usual. On the other hand, more com\u00adplex sys\u00adtems such as the safe con\u00adfig\u00adurable small con\u00adtroller PNOZ\u00admulti or the automa\u00adtion system PSS 4000 require more inten\u00adsive testing and mod\u00adi\u00adfi\u00adca\u00adtion to ensure they are CRA-com\u00adpliant. One impor\u00adtant ini\u00adtial task is to real\u00adis\u00adti\u00adcally esti\u00admate the effort required for all prod\u00aducts. I see myself as a medi\u00adator between product man\u00adage\u00adment and the teams that ulti\u00admately handle the tech\u00adnical imple\u00admen\u00adta\u00adtion.<\/p>\n\n\n\n
Our aim is clear: we want to keep our prod\u00aducts on the market and make them CRA-com\u00adpliant. We are responding to the new require\u00adments with a struc\u00adtured and for\u00adward-looking secu\u00adrity man\u00adage\u00adment approach, for example. For existing prod\u00aducts we con\u00adduct a gap analysis to iden\u00adtify require\u00adments from the CRA and imple\u00adment them accord\u00adingly.<\/p>\n\n\n\n
On the organ\u00adi\u00adsa\u00adtional side, we are working on making the Product Secu\u00adrity Inci\u00addent Response Team (PSIRT) ready for the reporting require\u00adments that are now being added to the existing vul\u00adner\u00ada\u00adbility man\u00adage\u00adment process. Vul\u00adner\u00ada\u00adbil\u00adi\u00adties are being assessed and the team pro\u00advides cus\u00adtomers with rec\u00adom\u00admended actions in the form of Secu\u00adrity Advi\u00adsories to help resolve the iden\u00adti\u00adfied vul\u00adner\u00ada\u00adbil\u00adi\u00adties.<\/p>\n\n\n\n
Reporting a vul\u00adner\u00ada\u00adbility to the PSIRT team:<\/strong> www.pilz.com\/psirt<\/a><\/p>\n\n\n\n