Automotive Sector Addresses New Cybersecurity Regulation in Gipuzkoa

Around fifty companies discussed the impact of the European Cyber Resilience Act (CRA) at an event organized by Ziur and Mubil in Donostia.

Close-up of an electric scooter wheel parked on a stone-paved sidewalk, with traditional stone buildings in the background and warm evening light.
IA

Close-up of an electric scooter wheel parked on a stone-paved sidewalk, with traditional stone buildings in the background and warm evening light.

Around fifty companies from the mobility sector analyzed the impact of the European Cyber Resilience Act (CRA) regulation on their products and processes at an event organized by Gipuzkoa's industrial cybersecurity centers, Ziur and Mubil, in Donostia.

The forum, held at the Mubil Center facilities in Eskuzaitzeta, addressed the "imminent" entry into force of various European regulations, particularly the Cyber Resilience Act (CRA), and its implications for processes, products, markets, and after-sales service, as explained by Ziur and Mubil in a statement.
The conference, titled 'CRA Law in Automotive: From Regulatory Requirement to Competitive Advantage,' emphasized "the mandatory adaptation capacity that the Gipuzkoan industrial fabric will need as a competitive factor to access or remain in the European market and generate trust among clients and partners."
The Provincial Deputy for Economic Promotion and Strategic Projects of Gipuzkoa, Unai Andueza, stated at the opening of the event that "the entry into force of the Cyber Resilience Act is an example of how the major challenges facing our industry can no longer be addressed in isolation." He highlighted, "Gipuzkoa has been building strategic capabilities for years to anticipate these changes, promoting initiatives like Ziur and Mubil, which today collaborate to offer joint responses to challenges that directly affect the competitiveness of our companies."
For her part, the director of Ziur, María Penilla, pointed out that the new regulatory framework represents "an opportunity to strengthen preparedness, differentiate in the market, clarify responsibilities, and improve the response capacity to cyber incidents." She argued, "The CRA forces us to anticipate and integrate cybersecurity from the design stage, turning a regulatory requirement into an opportunity to innovate, build trust, and reinforce the competitiveness of our industry."
The event also presented the initial results of the new CRA Acceleration Program from the Provincial Council of Gipuzkoa, promoted by Ziur. With a budget of three million euros, the program aims to "accompany companies throughout the entire adaptation cycle to the CRA, facilitating, among other things, the evaluation of their connected industrial products or services." In its first eight months, "25% of the planned evaluations have already been initiated, up to 70 per year," she noted.
The conference also featured presentations and case studies on how the regulation practically impacts businesses.