New EU machinery regulation.

Manufacturers and operators should prepare early for the implementation of the machinery regulation shifting safety responsibilities to machine operatives.

The implementation of the new Machinery Regulation (EU) 2023/1230, effective from 20 January 2027, marks one of the most significant changes to European machinery safety legislation in recent years. While manufacturers remain responsible for compliance when machinery is first placed on the market, the regulation introduces expanded responsibilities for operators throughout the machine's operational lifecycle.

The updated regulation introduces new requirements covering cybersecurity, artificial intelligence, and substantial machine modifications. Under the new rules, operators making significant changes to existing machinery may themselves be considered manufacturers, requiring them to perform risk assessments, maintain technical documentation, and complete conformity assessments before placing modified equipment back into service.

Growing need for early preparation.
Although the regulation will soon become mandatory, many organisations continue to face uncertainty due to the absence of official implementation guidance. This leaves manufacturers, machine builders, and plant operators making important compliance decisions without detailed interpretation from regulators.

Markus Erdorf

"As companies prepare for the transition, understanding how the new regulation applies to existing machinery is becoming increasingly important," said Markus Erdorf, Senior Safety Consultant at Leuze.

"Organisations should begin reviewing their machinery, documentation, cybersecurity strategies, and modification procedures now rather than waiting for the implementation deadline."

Cybersecurity becomes part of machine safety.
One of the most notable developments within the new Machinery Regulation is the integration of cybersecurity into machinery safety requirements. Organisations will need to protect machinery against unauthorised access, data manipulation, and other cyber risks while demonstrating compliance through appropriate documentation and risk assessments.

For many operators, this represents a significant shift from traditional machine safety practices and requires closer collaboration between safety engineers, automation specialists, and IT security teams.

Practical steps for machine operators.
To reduce future compliance risks, Leuze recommends that operators:

• Review the new Machinery Regulation requirements early.
• Work closely with machinery manufacturers and system integrators.
• Document all safety-related modifications and inspections.
• Evaluate whether planned machine changes qualify as substantial modifications.
• Monitor evolving standards related to machinery safety, cybersecurity, and AI.

Supporting safe machinery throughout its lifecycle.
As machinery safety requirements continue to evolve, Leuze supports manufacturers and operators with machine safety consulting, risk assessments, training, and engineering services designed to help organisations achieve regulatory compliance while maintaining operational efficiency.

"The responsibility for machine safety no longer ends when equipment is commissioned," added Erdorf. "Preparing today will help manufacturers and operators reduce compliance risks and ensure safe machine operation throughout the entire lifecycle."

---

@EU_Commission @LeuzeUK @LeuzeUSA @mepaxIntPR #PAuto

Security in engineering.

Proven standards for critical infrastructure – more relevant today than ever.

The topic of cybersecurity is currently gaining new regulatory visibility with the NIS2 Implementation Act and the upcoming Cyber Resilience Act (CRA). Requirements are becoming more concrete, obligations to provide evidence are increasing, and deadlines are drawing closer. This means a need for action for many companies. AUCOTEC regards this above all as confirmation.

AUCOTEC has worked for decades with operators of critical infrastructure. Throughout all these years, one central customer expectation has been taken as a given: the systems used must be secure at all times. Cyber Security is therefore not a new field of action, but has always been an integral part of the development and provision of the Engineering Base software platform.

Regulatory momentum meets established practice.
The current developments surrounding NIS2 and the CRA do not change the fundamental expectation of security – they make it more visible, measurable and, in many cases, also formally subject to evidence requirements.

This is precisely where AUCOTEC creates additional transparency: Engineering Base versions 2025 and 2026 were independently analysed using ReversingLabs Spectra Assure – and achieved Level 3 in the assessment process.

Importantly, this analysis does not mark a new security level, but confirms the one already established. At the time of the assessment, no known vulnerabilities classified as critical, no malware findings and no relevant license risks were identified. This is complemented by full transparency regarding all software components used, in the form of a Software Bill of Materials (SBOM).

External validation of an existing commitment.
“Cyber Security has never been optional for our customers – and therefore not for us either,” explains Dr. Jan-Mirko Maczewski, Head of Research & Development at AUCOTEC. “Current regulatory requirements such as NIS2 or the Cyber Resilience Act are not prompting a rethink; rather, they confirm our long-standing approach.”

The Spectra analysis addresses key technical aspects of modern security requirements – in particular transparency, traceability and the systematic assessment of software components. There is no formal equivalence with regulatory requirements. However, there is substantial alignment in key areas.

For customers, this means: a robust, independent security assessment, support in meeting growing evidence requirements, reduced effort in audit and approval processes, and additional assurance in regulated project environments.

Continuity as the decisive factor.
The independent assessment is deliberately designed as part of a continuous process. Security analyses are carried out regularly and continued with every version.

The fact that both the current and the already established version of Engineering Base achieve this level underlines the key message: Cyber Security at AUCOTEC is a consistent standard.

Holistically embedded – technologically and organisationally.
This commitment is reflected not only in the product itself, but also in the supporting structures: ISO 27001-certified information security management, ISO 9001-certified quality management, clear responsibilities, including through a Chief Information Security Officer (CISO), as well as established audit and governance processes.

These are being continuously developed further with the ongoing expansion of Quality Excellence structures.

A clear signal in the context of new requirements.
Looking ahead to the upcoming CRA deadlines and the implementation of NIS2, it is clear: Cyber Security is increasingly evolving from an implicit expectation into an explicit obligation to provide evidence. AUCOTEC is addressing this development with transparency regarding a security level that has been established for decades. Or put another way: the requirements are becoming more concrete – the response to them has long been part of the solution at AUCOTEC.

---

@AUCOTEC_AG @PresseBox @UnnGmbh @Cybersec_EU @ec.europa.eu #Aucutec #Cybersecurity #PAuto

Major European investment for metals monitoring.

Sensmet, the Finnish developer of a unique continuous metals monitoring technology, has received a major investment (€1.5m) from EIT RawMaterials which is supported by the European Institute of Innovation and Technology (EIT), a body of the European Union, to help secure the supply of critical and strategically important raw materials.

Sensmet will use the funds to leverage the scale-up and deployment of its µDOES® online metals analysers to strengthen Europe’s raw materials resilience and competitiveness. 

“Our highly innovative technology provides process managers with continuous measurements for key metals within liquid process streams,” explains Sensmet CEO, Dr Toni Laurila (right). “This enables them, for example, to extract critically important metals much more efficiently than would have been previously possible when relying on laboratory analysis.”

This technology is deployed in numerous applications within raw material value chains – including wastewater treatment, battery recycling, lithium production and fertilizer manufacture. Sensmet has been chosen for this investment because continuous measurements in these applications enable and enhance the recovery of metals that are critically important for the digital economy.

EIT RawMaterials’ mission is to secure a sustainable, independent supply of materials for Europe. EIT RawMaterials is a Knowledge and Innovation Community cofunded by the European Commission and one of Europe’s most active innovation ecosystems in the raw materials sector. The organisation supports technologies and industrial solutions that strengthen Europe’s security of supply for critical raw materials such as lithium, cobalt, nickel, and rare earth elements (REEs), which are essential for batteries, renewable energy systems, and advanced manufacturing.

“Our business aligns perfectly with the goals of EIT RawMaterials,” adds Toni Laurila, “so we are honoured to receive this investment, and excited to see how we can use it to scale the µDOES platform and accelerate growth.”

---

@Sensmet_Ltd @EITeu @_Enviro_News #PAuto #Europe