ISO 24882
FAQ
Is ISO 24882 mandatory?
No. Standards are voluntary. The Machinery Regulation and the CRA are mandatory; ISO 24882 is one way to show how you meet them.
Do I need the Machinery Cybersecurity Kit first?
No. The pack is designed to point to the evidence IDs of that kit, but any file with numbered evidence works.
Does the pack include the standard?
No. Buy your copy from ISO or your national standards body. The pack cites clause numbers only.
Does it replace functional safety work?
No. Keep your ISO 25119 work. The pack shows where cybersecurity touches it.
I make tractors. Is this for me?
The standard covers tractors, but the pack's legal mapping is written for machinery. Tractors follow Regulation (EU) 167/2013; check the CRA for their connected functions.
I supply a control unit to machine makers. What applies?
It may be partly completed machinery or a safety component. See “Selling part of a machine” on the Explained page.
How does ISO 24882 relate to ISO 25119?
ISO 25119 handles failures; ISO 24882 handles deliberate attacks. You need both views, and the pack links them.
What happens when the standard is published?
The pack is re-mapped to the published edition, and the update is free under the licence.