EU CRA reporting obligations went live 11 Sept 2026. A 5-step architecture for IIoT vendors: detection, triage, the 24h/72h/14-day clock and ENISA submission.
Zero-trust architecture for industrial OT and IoT — micro-segmentation patterns, identity for machines, NIST SP 800-207 applied to plants, and what the Purdue model gets wrong.
IEC 62443 explained for 2026: zones and conduits, security levels, foundational requirements, a worked risk assessment, certification and CRA/NIS2 links.