Siemens, Ericsson warn EU cybersecurity rules may disrupt supply chains

Posted under: Online Security
Date: 2023-11-08
Siemens, Ericsson warn EU cybersecurity rules may disrupt supply chains

Siemens, Ericsson, Schneider Electric, and DigitalEurope, together with other industry leaders, have expressed concerns about the potential disruptive impact of the EU's proposed Cyber Resilience Act, designed to address cybersecurity risks in smart devices. These regulations, suggested by the European Commission, mandate manufacturers, importers, and distributors of internet-connected devices to evaluate and rectify cybersecurity issues for five years or the expected product lifespan. The CEOs argue that these rules could lead to supply chain disruptions similar to those experienced during the pandemic. They suggest that the scope of the regulations should be narrowed, allowing manufacturers to address known vulnerabilities without extensive assessments, and self-assessment flexibility should be increased. These concerns precede negotiations on the law's specifics, set for November 8, as EU lawmakers and member states aim to finalize the legislation.