Cybersecurity_Enabling_Header
Cybersecurity - Enabling the Organisation

Cybersecurity:
Optimise processes and competencies

Legally compliant security development processes. Certified employee competencies.

Legally compliant security development processes.
Certified employee competencies.

To develop and operate cyber-secure machines and systems, manufacturers must design their processes in line with legal requirements. These include the Cyber Resilience Act (CRA), which – depending on the product – requires proof of conformity by self-declaration or certification.

With our security services, we support manufacturers across all industries in introducing and optimising security development processes. After determining your company’s maturity level by means of a gap analysis, we propose concrete measures and accompany the introduction of legally compliant processes. We also prepare the necessary documentation and strengthen security expertise within your company through workshops, training courses and seminars.

We prepare your company for the relevant laws and regulations:

  • Cyber Resilience Act (CRA)
  • NIS 2 Directive for critical infrastructure or industry-specific regulations
  • Medical Device Regulation (MDR)
  • Radio Equipment Directive (RED)
  • Machinery Regulation
  • UNECE R 155 and R 156
  • Industry-specific requirements (FDA, NIST, BSI, NSH, ...)
  • and others
Phases_SecurityProductDevelopment_Enabling

Drei Säulen des Security-Engineerings

Security engineering does not begin with the development of a product, nor does it end with its market launch. Comprehensive cyber resilience requires everything to be taken into account, from development processes, competence management and system design through secure operation to decommissioning.

We distinguish between three overarching pillars of security engineering:

NewTec Services

Wir rüsten Ihr Unternehmen für die relevanten Anforderungen.

How can we help enable your company with legally compliant processes and certified employee competencies?

CRA-Reifegradbestimmung: Gap-Analyse der Entwicklungs- und Support-Prozesse nach IEC 62443-4-1
CRA maturity assessment & gap analysis

How robust are your development and support processes?

In a structured assessment, we analyse your processes in accordance with IEC 62443-4-1, EN 18031, IEC 81001 etc. – standards that address key requirements of the Cyber Resilience Act. The result: a well-founded gap analysis and a clear roadmap for closing the gaps identified. Insert link

Learn more
Cybersecurity-Prozesse etablieren: Workshop zu CRA, IEC 62443 und ISO 21434 für Entwicklungsteams
Cybersecurity-Prozesses

Establishing security processes sustainably

Legal requirements such as the Cyber Resilience Act, the MDR or the Machinery Regulation call for end-to-end, documented processes in product development. NewTec supports companies in analysing existing structures, introducing security processes in a targeted manner and implementing industry-specific requirements (e.g. ISO 21434, IEC 62443, EN 18031, IEC 81001). Practical workshop packages for management and/or project staff build expertise within your company and provide an overview of the legal and normative requirements in your project context. Insert link

Learn more
Engineer leading a workshop in a meeting room
Training & Workshops

Making security competence verifiable – with NewTec’s training programme

Legal requirements such as the Cyber Resilience Act, the Medical Device Regulation and the Machinery Directive not only demand secure products, but also proof of the security expertise of the specialists involved. With our range of security training courses, NewTec helps companies prepare their employees specifically for these requirements. The practical training courses impart in-depth knowledge of methods, standards and processes for ‘secure by design’ products – tailored to different industries and roles in development. We issue official certificates for participation in our training courses, which can be used as proof of competence for approval bodies.

Learn more
Gespräch

Reden wir über Ihr Security-Projekt.

Wir ordnen Ihren Anwendungsfall normgerecht ein, bestimmen den Reifegrad Ihrer Prozesse und zeigen den schnellsten Weg zu cyberresilienten Produkten.