Germany Prepares Cybersecurity Workforce for EU Cyber Resilience Act

Germany is enhancing its cybersecurity capabilities in response to the EU's Cyber Resilience Act (CRA), which mandates security measures for hardware and software products. The CRA requires manufacturers to integrate security throughout the product lifecycle, from design to end-of-support. A survey by ONEKEY indicates that German manufacturers are increasing IT resource allocation for cybersecurity, with more personnel involved in security activities. The CRA emphasizes a security-by-design approach, necessitating risk assessments and vulnerability management during product development. Starting September 11, 2026, manufacturers must report actively exploited vulnerabilities and severe incidents within specified timeframes. This regulatory framework is crucial for Germany's industrial sector, which heavily relies on interconnected systems vulnerable to cyberattacks.

Key Points: • Germany is enhancing cybersecurity workforce in line with the EU Cyber Resilience Act. • Manufacturers must integrate security measures throughout the product lifecycle. • From September 11, 2026, manufacturers must report actively exploited vulnerabilities.