The impact of NIS2 and CRA on Cybersecurity in Manufacturing

The Network Information Security version 2 (NIS2) Directive and Cyber Resilience Act (CRA) represent a fundamental pivot in industrial law, shifting cybersecurity from a voluntary IT 'best practice' to a mandatory legal obligation for manufacturing leadership. Under NIS2, management faces direct personal accountability and significant turnover-based fines for the resilience of their production environments, while the CRA mandates that any digital product, from a PLC to a connected sensor,must be built with 'security-by-design' and carry a CE mark to enter the EU market. For the South East’s automation sector, this means cybersecurity is no longer just a technical checkbox, but a non-negotiable requirement for operational continuity, product marketability, and boardroom liability.

Version: 1.0

Updated: 23 February 2026

Topic...	Name...	....Document....	....Slides....
2	NIS2 and CRA: An Introduction			...