Cybersecurity for Manufacturing

Why cybersecurity is now your concern too 

Connected machines and digital products make your business more efficient, but also more vulnerable. A cyberattack on your OT environment or an insecure product can halt production, harm customers and damage your reputation.

New legislation makes protection mandatory. The NIS2 Directive and the Cyber Resilience Act (CRA) apply to manufacturers with connected or digital products. They require you to embed cybersecurity throughout the full product lifecycle: from design and supply chain to deployment and maintenance. The CRA comes into force in 2027. Starting now avoids last-minute pressure.

This masterclass was developed for SMEs, product developers, and system integrators in manufacturing. You gain clear insight into what the legislation concretely requires of you, and learn hands-on how to apply those measures to your own products. 
 

For whom?

•    Product engineers and R&D managers
• OT managers and operations leads
• System integrators and embedded solutions providers
• Product managers responsible for compliance or lifecycle management
• SMEs that build or integrate connected machines or digital products
   

Key takeaways

After this day:

• You understand what NIS2 and the CRA mean in practice for your products and organisation
• You can identify the most common vulnerabilities in connected and embedded products
• You experience first-hand how attackers think, through a Capture the Flag exercise, and use that perspective to better protect your own products
• You leave with a practical action plan for secure and compliant products 
   
• You receive a certificate of attendance: tangible proof that your team is actively building cybersecurity knowledge, a relevant element within your broader NIS2 approach
   

Programme

Morning session: OT security, NIS2 and CRA compliance

Start the day with a focused and accessible theory block that covers the essential foundations for product manufacturers and integrators.

Topics include:

• OT cybersecurity fundamentals
• NIS2 obligations in industrial settings
• Clear interpretation of the CRA for connected products
• Security requirements and good practices across the supply chain
• Integrating security into development and lifecycle management
   

This session helps you turn regulatory pressure into a concrete roadmap for secure and compliant products.

Afternoon Session: hands-on: capture the flag

The second half of the day shifts to practical application. You learn to think like an attacker. Through a Capture the Flag exercise, you actively hunt for vulnerabilities in a realistic environment — and translate those insights into concrete security measures for your own products.

You will practice:

• Identifying common vulnerabilities in connected and digital products
• Using accessible tools to test product security
• Reducing risks through secure configuration and patching
• Applying essential security measures to embedded and network-connected devices

Remember to bring your laptop.

By the end of the workshop, you will know how to recognise weaknesses in your product and how to address them efficiently.
 

Flemish companies can take advantage of a subsidy from VLAIO for this course

This programme is part of Industriepartnershap in which 13 Flemish innovation partners offer an integrated service to stimulate growth and innovation in the Flemish industry in the 6 following themes: AI, Cybersecurity, Circularity, Digitisation, Climate & Energy and Industry 4.0. They do so under the leadership of Agoria and Sirris and with the support of Agentschap Innoveren & Ondernemen.

©Sirris