SECURE: A foundational compliance layer for all embedded systems

Cybersecurity & Regulatory Compliance

We design hardware and firmware according to the requirements of the Cyber Resilience Act and the RED Directive.
Our systems integrate security by design, vulnerability management, and technical traceability, ensuring CE compliance, operational robustness, and regulatory readiness right from the development stage.

Our commitment to cybersecurity

We started a defined process to address the new European regulations on cybersecurity and artificial intelligence, which are reshaping the rules of design, production, and management of electronic and digital systems.

Consolidation of cybersecurity requirements across EU product regulations

EU recently introduced a series of regulations with a significant impact on all the producers of digital technologies. These include:

Cyber Resilience Act (CRA):

imposes “security by design” requirements for all products with digital elements
Delegated Act RED:

defines specific obligations for connected radio devices (e.g. smartphones, IoT)
NIS2 Directive

strengthens cyber resilience for public and private organizations in essential sectors
New Machinery Regulation

integrates cybersecurity among mandatory requirements for industrial machinery
Artificial Intelligence Act (AI Act)

introduces reliability, transparency, and risk management criteria for AI systems
Data Act:

regulates the access, sharing, and secure management of data generated by connected devices, defining obligations for manufacturers and cloud service providers

These regulations emphasize security throughout the entire product lifecycle, requiring structured management of vulnerabilities, technical documentation, and organizational responsibilities.

EU legislative act	Requirements	Stakeholders	Compliance deadlines	Affected products/sectors	Relation to CRA
Cyber Resilience Act	Cybersecurity requirements for hardware and software with digital elements	Manufacturers, importers, distributors	Sept 11, 2026 (notification) / Dec 11, 2027 (mandatory)	All connected digital products (routers, wearables, embedded software)	Core cybersecurity product regulation
RED Delegated Act	Security requirements for radio devices	Manufacturers/importers of radio equipment	Effective from August 1, 2025	Smartphones, NFC systems, baby monitors, radio-based IoT devices	Overlaps with CRA for “security by design”
NIS2 Directive	Risk management measures, mandatory incident reporting	Medium/large companies in critical sectors	Effective from October 17, 2024	Energy, transport, digital, public sector, manufacturing, healthcare	Organizational approach, complementary to CRA
Machinery Regulation	Safety and cybersecurity requirements for machines and components	Machine manufacturers and integrators	Effective from January 20, 2027	Industrial machinery, automated systems, mechanical accessories	Requires joint compliance: CRA + mechanical standards
AI Act	High-risk AI systems: transparency, human oversight, robustness	Developers, integrators, users of AI systems	Feb 2, 2025 (skills) / Aug 2, 2026 (application)	AI in healthcare, recruitment, traffic, biometrics, insurance pricing, etc.	Supplements CRA: focus on AI security and integrity
Data Act	Access, sharing, protection, and portability of data from connected devices	Device manufacturers, cloud providers, business users	Effective from September 12, 2025	All industrial and consumer IoT devices, platforms, and cloud services	Complements CRA: regulates lifecycle of device-generated data

Why so important

Compliance is not just a legal obligation – it’s a competitive advantage. Our customers benefit from:

Components designed to be compliant or adaptable to CRA and related directives
Reduced certification burdens and simplified technical documentation
Built-in security that protects end users, infrastructure, and data
Technical and documentation support for compliance assessments and audits

Looking ahead, together

Cybersecurity is a continuous challenge. That’s why Micro Systems is committed to strictly monitoring the evolution of European regulations and investing in research, training, and process improvement.
We will regularly update our corporate blog with technical insights, regulatory deadlines, and practical tips to help navigate this transition with confidence.
For any questions or specific requests, our team is at your disposal. Together, we can build a safer, more reliable, and compliant digital ecosystem.