One Product, Two Markets: EU and US Cybersecurity Requirements for Industrial Products

One industrial product portfolio may serve both the European Union (EU) and the U.S., but cybersecurity requirements reach manufacturers in different ways. In the EU, products are regulated directly through the Cyber Resilience Act (CRA), Machinery Regulation and AI Act. In the U.S., requirements are more commonly driven by sector rules, procurement expectations and targeted product controls.

During this webinar, UL Solutions will explain which requirements may apply to industrial products in each market and why the evidence expected by customers and regulators is increasingly similar.

The session will explore how an ISA/IEC 62443-based program may support a common engineering baseline for secure development, component transparency, vulnerability handling and life cycle support and where additional evidence may be required.

What will attendees gain insights into?

Participants will learn:
• How the EU and U.S. cybersecurity models differ
• Which EU requirements may apply, including the CRA, Machinery Regulation and AI Act, with NIS 2 as an operator and supply-chain layer
• How CRA scope and product classification influence the conformity assessment route
• When cybersecurity becomes a machinery safety requirement and when industrial AI may be considered high-risk
• What U.S. initiatives, procurement expectations and product controls may mean for manufacturers
• How ISA/IEC 62443 can support a common evidence strategy across both markets  
• Five practical actions to begin in the next 90 days

What is the agenda of this webinar?

1. EU and U.S. cybersecurity models compared  
2. European Union (EU) – CRA, Machinery Regulation and AI Act  
3. United States – Sector rules, procurement and targeted product controls  
4. ISA/IEC 62443 as a common evidence baseline  
5. 90-day action plan  
6. Q&A session

Gain interesting insights. Register for the webinar to explore how cybersecurity requirements are evolving across the EU and U.S. markets.

Disclaimer: This webinar provides general information based on regulations, guidance and standards available as of the presentation date. It does not constitute legal advice or a conformity assessment. Verify regulatory and standards developments before making product-specific decisions.

Speakers

Rahul Gupta,

Lead Principal Advisor, Industrial Cybersecurity, UL Solutions

Rahul Gupta is the Lead Principal Advisor for Industrial Cybersecurity at UL Solutions, based in Kuala Lumpur, Malaysia. With more than 35 years of experience, he leads UL Solutions’ global industrial cybersecurity portfolio and has delivered over 500 projects across more than 50 countries. He is the program owner for IEC 62443-related training and certification programs, including UL Certified Cybersecurity Professional (CCSP), the IECEE CB Scheme, ISASecure and UL Cybersecurity Assurance Program (CAP). 

Rahul is a recognized expert in industrial cybersecurity regulations and standards. He serves as Technical Lead for notified-body activities under the EU Cyber Resilience Act and supports compliance with the EU Machinery Regulation and other emerging cybersecurity requirements. He actively contributes to ISA/IEC 62443 standards committees and the ISASecure IEC 62443 Steering Technical Committee, working closely with regulators and conformity assessment bodies worldwide. His extensive experience spans operational technology (OT), functional safety, industrial automation, energy, oil and gas, chemicals and smart manufacturing, helping organizations leverage IEC 62443 as a foundation for cybersecurity and regulatory compliance across global markets.