Comments by the electrical industry on the EU Cybersecurity Act (Stellungnahme)

This document provides insights of the German Electrical and Electronic Manufacturers‘ Association and its 1,600 member companies on the draft EU Cybersecurity Act published in September 2017. Advice is given on the further constructive development of the draft regulation currently discussed by the Council of Ministers, the European Parliament and the EU Commission. It is important to ensure that the regulation is implemented in a way that is suitable for industry and promotes innovation in the same time. It is crucial for the ZVEI member companies that: • priority is given to international harmonised standards; • industry participation and manufactures’ ownership are strengthened; • third party certification cannot serve as a substitute for trust; • the design of a „conformity and certification“ framework will be developed further; • mandates regarding necessity and scope for „conformity and certification“ schemes are based on clear, comprehensible criteria.