The increasing number of cybersecurity regulations for the manufacturing industry requires a structured risk management method: This book aims to provide a comprehensive, practical guide to risk management for networked industrial plants. It covers the entire value chain – from individual machines (such as CNC milling machines or robots) to their digital ecosystem, including the cloud/on-prem backend of manufacturers, integrators, and service providers, to the factory production environment. On this basis, the work combines technical best practice approaches with the relevant ISO/IEC 27000 and IEC 62443 standards and explains how their specifications can be pragmatically transferred into everyday operations. Using detailed, realistic case studies, it shows how technical rigor and operational efficiency can be combined to minimize security and liability risks throughout the entire life cycle. Special attention is paid to the very new European requirements, in particular the Cyber Resilience Act: The book provides practical information that companies can use to prepare their products and processes for compliance now. It offers an understandable approach and a precise reference for seamlessly combining legal, organizational, and technical requirements for cybersecurity, safety, and product liability. This also gives readers the opportunity to prepare for compliance, particularly with the Cyber Resilience Act for risk management, even before harmonized standards are published at the European level.

Alexander Schlensog holds a degree in Physics and has extensive experience in information security, gained through long-term work in the consulting and IT sectors. He operates as a senior cybersecurity manager and expert, leading consulting engagements for industrial clients with a focus on complex and emerging challenges in digital security. His work centers on cybersecurity in industrial environments and critical infrastructure, with a strong emphasis on translating regulatory requirements into practical, scalable security architectures. He is also actively involved in ISO/DIN standardization committees and industry working groups, contributing to the development of frameworks for information security and data protection.

Rodrigo do Carmo holds a PhD in Computer Science and studied Telecommunications Engineering. After working in the automotive industry at Continental AG, he transitioned into cybersecurity consulting, where he advises industrial clients on cybersecurity and risk management, with a strong focus on operational technology (OT) environments. His expertise spans manufacturing and industrial production systems, particularly the security of complex, interconnected OT landscapes and the execution of large-scale risk assessments in critical production environments. He is actively involved in VDMA working groups as well as ISO/DIN standardization committees, contributing to the development of cybersecurity standards and best practices for industrial and OT security.

Makan Rafiee is a mathematician and computer scientist and heads the cryptography and PKI team at secunet. He develops security concepts and performs analyses in the industrial and automotive sectors, with a particular focus on cryptography and post-quantum cryptography. Another focus of his work is the practical implementation of complex PKI projects.
 
Nils O. Abeling holds a doctorate in physics and works at secunet in cybersecurity consulting. As a PKI expert, he supports industrial customers in complex projects, particularly in risk analysis and the development of security concepts. His focus is on securing networked systems in industrial environments. He is also intensively involved in the migration to post-quantum cryptography.