SIGNAL+DRAHT | Issue 11/2025
What does the Cyber Resilience Act (CRA) mean for the railway sector?
Railway safety is a joint effort. On the one hand, it requires safe operating processes, a safe operating environment and continuous maintenance of this state. On the other hand, products must support this level of safety. This has been standard safety practice for over 100 years. In the case of security, it has primarily been the operators (KRITIS, NIS) who have been held accountable. The Cyber Resilience Act (CRA) now requires all product manufacturers to follow suit and comply with the minimum standards....