New EU regulations like Radio Equipment Directive (RED), EU Machinery Regulation (MR) and Cyber Resilience Act (CRA) introduce cybersecurity requirements that affect radio equipment, machinery and digital products. For OEMs using wireless remote control systems, understanding the regulatory landscape early helps ensure a predictable path to CE marking 2027 and beyond.
What's coming
Several EU legislations introduce cybersecurity expectations for machinery placed on the European market. They address different parts of the system – the machine itself, radio equipment, and digital products – but together they shape the future compliance framework.
What it is
The EU Radio Equipment Directive (RED) 2014/53/EU regulates equipment that communicates via radio signals at designated frequencies.
In effect
Cybersecurity requirements under Article 3(3) apply from August 2025.
What it covers
Radio equipment, including wireless remote control systems.
What it means for equipment manufacturers
Remote control equipment integrated into machinery must comply with RED and be supported with the necessary documentation.
What it is
The EU Machinery Regulation (EU) 2023/1230 replaces the current Machinery Directive.
In effect
Applies from January 2027 across all EU member states.
What it covers
The complete machine placed on the EU market.
What it means for OEMs
OEMs must continue to perform a risk assessment and CE-marking process, ensuring that safety and cybersecurity risks – including those related to software and digital technologies – are properly addressed.
The regulatory landscape is evolving and pending harmonization, but a few themes are already clear. Because these regulations apply to machines placed on the EU market after the relevant deadlines, both new and existing machine designs need to be reviewed.
Future CE marking will increasingly rely on structured documentation such as:
- cybersecurity risk assessments
- design decisions
- lifecycle management processes
Clear documentation will become as important as the technical solution itself.
.png?width=960&height=1371&name=cybersecurity%20image%20self-check2%20(1).png)
Self-test
Start here:
Do you sell machines on the European market?
Do your machines use wireless communication, remote control systems or other digital products?
Will you place machines on the EU market after 2025–2027?
If yes, it may be worth considering:
Have cybersecurity requirements been considered in your system architecture?
Are responsibilities between OEM and suppliers clearly defined?
Do you have a documented process for handling software updates and vulnerabilities?
If several of these questions are still open, it may be useful to review how the upcoming regulations could affect your platform.
ON-DEMAND WEBINAR SERIES
Watch our on-demand webinars on what the new EU cybersecurity rules mean for your machines — and how to get compliance-ready before the Machine Regulation and CRA applies. Hosted by Scanreco's experts.
🌎 Webinars are in English with options for subtitles in various languages in the video settings.
.png?width=640&height=359&name=Webinar%20series_webinar%201%20(1).png)
on-demand webinar
In this webinar, our experts break down what the Machinery Regulation and Cyber Resilience Act mean in practice, who they apply to, the most important deadlines to prepare for, and how OEMs should start working with suppliers and internal risk assessments today.
.jpg?width=640&height=360&name=Webinar%20series_TARA%2016-9%20(1).jpg)
On-demand webinar
In this webinar, our experts explain what TARA is, why it matters, how it helps you uncover vulnerabilities in your systems, and how to use it as a practical foundation for stronger, more secure machine design across the full product lifecycle.
On-demand webinar
In this webinar, Anna Johansson, a senior cybersecurity and risk consultant at AON, shares her perspective on today’s evolving cybersecurity landscape, how cyber exposure is assessed, which risk areas companies often overlook, and what additional measures should support effective risk mitigation and long-term business resilience.
On-demand webinar
In this webinar, our expert examines how to integrate cybersecurity across the entire product lifecycle, from initial deployment to long-term compliance. The discussion focuses on the importance of lifecycle readiness and what it means in practice when assessing products and suppliers.
Scanreco perspective
At Scanreco, at the core of what we do is delivering best possible product integrity - control solutions designed to withstand both today’s requirements and tomorrow’s risks and challenges.
We approach product integrity through three interconnected dimensions.
Safety integrity ensures that our systems meet demanding functional safety requirements, including SIL-rated architectures for critical machine operations.
Security integrity addresses the growing importance of cybersecurity and evolving regulatory requirements for wireless and digital systems.
Lifecycle integrity focuses on maintaining system robustness over time, including structured approaches to updates, vulnerability handling and long-term platform support.
Together, these dimensions form the foundation of Scanreco’s long-term commitment to delivering reliable and future-ready control solutions for machine builders and operators.
We continously develop information to help you stay up to date on how to navigate remote controlled machine related cybersecurity updates.
Blog
Safety and Compliance
.png?width=900&height=1200&name=transparent-Photoroom%20(2).png)
Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua.