CEI 0‑16 Cybersecurity and the EU Cyber Resilience Act: 30‑Minute Power Briefing

Description/abstract

CEI 0‑16 sets the technical rules for connecting active and passive users to Italy’s medium‑ and high‑voltage (MV/HV) distribution networks and, through Annexes O (Controllore Centrale d’Impianto (CCI) and T (IEC 61850 communications), embeds concrete cybersecurity expectations for plant controllers and secure data exchange.

In parallel, the European Union’s (EU) Cyber Resilience Act (CRA) introduces horizontal cybersecurity obligations for products with digital elements — requiring vulnerability and incident reporting from Sept. 11, 2026, and full compliance from Dec. 11, 2027 — affecting connected equipment and software placed on the EU market.

This 30-minute briefing explains how to align CEI 0‑16 compliance, including recent updates impacting the CCI and limitation of active power based on a distribution system operator signal, up to zero kilowatts (PF2) functionalities, with CRA readiness.

Key takeaways

Learn how CEI 0‑16 embeds cybersecurity into grid connection requirements, including updates affecting the CCI in Annex O and secure communications in Annex T. You’ll also leave with a clear, practical alignment plan that connects CEI 0‑16 obligations with CRA documentation, updates and incident and vulnerability reporting.

Know the CRA deadlines

• Reporting obligations from Sept. 11, 2026
• Full compliance from Dec. 11, 2027

Speakers

Javier García
As a sales service specialist at UL Solutions, Javier supports organizations navigating grid code compliance across energy and industrial automation applications, based on his technical background working on Engineering teams in the past.

His work focuses on helping customers interpret technical requirements and move confidently toward product certification and compliant grid connection.

Stefano Floridan
As a technical product specialist at UL Solutions, Stefano works with customers across Europe, the Middle East, Africa and North America to address cybersecurity and functional safety challenges. His work is informed by deep experience in operational and information technology cybersecurity engineering and business development, including roles at Siemens and as a managed detection and response (MDR) provider. He holds a master’s degree in mechanical engineering from Politecnico di Torino, where his thesis focused on artificial intelligence (AI) applied to robotics.