Defense in Depth
Food for thought on the public holiday in Germany: What is defense in depth and why should you consider it?
Similar Posts
New Publication: Automated Security Risk Management for trains
Patric Birr and I published an article in SIGNAL+DRAHT, the leading international medium for control and safety technology plus communication and information technology in the railway sector. In the article we propose automating Security Risk Assessments by using digital twins. These allow attack trees to be derived automatically enabling a systematic analysis of potential attack…
CRA Compliance Costs Money – But What Does Non-Compliance Really Cost?
In discussions with manufacturers about the Cyber Resilience Act, one recurring theme is: “Compliance is expensive.” True, implementing CRA requirements does require significant investment. However, the costs of non-compliance and incidents can be far greater – and the financial risks are often underestimated. What Iāve observed in practice: Many manufacturers focus solely on the upfront…
CRA: Standardization projects
Currently a lot of standardization projects regarding the CRA are on-going. These standardization projects aim to develop harmonized European standards for the fundamental cybersecurity requirements of the CRA and the requirements regarding vulnerability management (horizontal standards) as well as different product categories (vertical standards). You can find an overview over the currently active standardization projects…
