Machinery Regulation Cybersecurity Kit

Inside the kit

From a design rule to a released update.

The Brannvik worked example shows how one engineering decision runs through the update procedure, the substantial modification assessment and the evidence matrix.

How the documents connect

Measure
M-18
Activation at standstill after confirmation.
Requirement
PR-31
Written as a testable rule.
Procedure
MR-07
Applied to every release.
Change
SM-01
A security fix inside the envelope.

Excerpt from the Brannvik update procedure showing the release classes and the activation conditions. — Activate only when it is safe.
The update procedure lets the controller download an image in the background, but activates it only at standstill and after the operator confirms on the terminal.
EX_MR-07_Update_Procedure_Brannvik_M24 · section 6

Excerpts from the fictional Brannvik SprayLine M24 worked example included in the kit. Product files are in English. Select an image to enlarge it.

14 modules

Module	What it answers	Files
MR-01	Does the Regulation apply? What kind of product is it, which conformity route, which cybersecurity requirements, and does the CRA apply too?	Word record + guide
MR-02	Which software, data and hardware are critical for compliance, and what must the machine identify?	Word inventory + guide
MR-03	Who could cause a hazardous situation on purpose, how, and what do we do about it?	Excel risk assessment workbook + guide
MR-04	Which command may each interface give, and what happens when power or the network drops and returns?	Word analysis + guide
MR-05	Which protection does each item need, written as testable requirements?	Word specification + guide
MR-06	Which interventions does the machine record, how is the log protected, how long is it kept?	Word specification + guide
MR-07	How do we identify safety software, and release and activate updates safely?	Word procedure + guide
MR-08	How do we prove each requirement, and has it passed?	Word verification plan + guide
MR-09	Is every obligation backed by evidence?	Excel matrix + guide
MR-10	What goes into the technical file under Annex IV?	Word template + guide
MR-11	What must our suppliers deliver, and did they?	Word requirements + guide
MR-12	What do the instructions for use say about cybersecurity?	Word chapter + guide
MR-13	When does a change make us, or someone else, the manufacturer?	Word assessment + guide
MR-14	How do the Machinery Regulation and the CRA map onto each other?	Excel mapping workbook + guide
Worked example	What does a finished file look like?	25 completed files

MR-01
Does the Regulation apply? What kind of product is it, which conformity route, which cybersecurity requirements, and does the CRA apply too?
Word record + guide
MR-02
Which software, data and hardware are critical for compliance, and what must the machine identify?
Word inventory + guide
MR-03
Who could cause a hazardous situation on purpose, how, and what do we do about it?
Excel risk assessment workbook + guide
MR-04
Which command may each interface give, and what happens when power or the network drops and returns?
Word analysis + guide
MR-05
Which protection does each item need, written as testable requirements?
Word specification + guide
MR-06
Which interventions does the machine record, how is the log protected, how long is it kept?
Word specification + guide
MR-07
How do we identify safety software, and release and activate updates safely?
Word procedure + guide
MR-08
How do we prove each requirement, and has it passed?
Word verification plan + guide
MR-09
Is every obligation backed by evidence?
Excel matrix + guide
MR-10
What goes into the technical file under Annex IV?
Word template + guide
MR-11
What must our suppliers deliver, and did they?
Word requirements + guide
MR-12
What do the instructions for use say about cybersecurity?
Word chapter + guide
MR-13
When does a change make us, or someone else, the manufacturer?
Word assessment + guide
MR-14
How do the Machinery Regulation and the CRA map onto each other?
Excel mapping workbook + guide
Worked example
What does a finished file look like?
25 completed files

What is in the kit

Every file in release 2026-11 v1.0. Titles are the English file titles, because the files are in English.

Templates (14)
Code	Title	Format	Filled in the worked example
MR-01	Applicability and Classification Record	Word + PDF	Yes
MR-02	Compliance-Critical Inventory	Word + PDF	Yes
MR-03	Safety and Security Risk Assessment	Excel	Yes
MR-04	Connection and Interface Analysis	Word + PDF	Yes
MR-05	Protection Measures Specification	Word + PDF	Yes
MR-06	Evidence of Interventions Specification	Word + PDF	Yes
MR-07	Software Identification and Update Procedure	Word + PDF	Yes
MR-08	Verification Plan	Word + PDF	Yes
MR-09	Requirement and Evidence Matrix	Excel	Yes
MR-10	Technical Documentation: Cybersecurity Part	Word + PDF	Yes
MR-11	Supplier Cybersecurity Requirements	Word + PDF	Yes
MR-12	Instructions for Use: Cybersecurity Content	Word + PDF	Yes
MR-13	Substantial Modification Assessment	Word + PDF	Yes
MR-14	Machinery Regulation and CRA Mapping	Excel	Yes

Every Word template comes with a PDF copy, so you can read it before you open Word. In the worked example, each Word file has a PDF copy too.

Guides and other files
Code	Title	Format
00	Start Here	PDF
MR-01	Applicability and Classification Guide	PDF
MR-02	Compliance-Critical Inventory Guide	PDF
MR-03	Safety and Security Risk Assessment Guide	PDF
MR-04	Connection and Interface Analysis Guide	PDF
MR-05	Protection Measures Specification Guide	PDF
MR-06	Evidence of Interventions Guide	PDF
MR-07	Software Identification and Update Guide	PDF
MR-08	Verification Plan Guide	PDF
MR-09	Requirement and Evidence Matrix Guide	PDF
MR-10	Technical Documentation: Cybersecurity Part Guide	PDF
MR-11	Supplier Cybersecurity Requirements Guide	PDF
MR-12	Instructions for Use: Cybersecurity Guide	PDF
MR-13	Substantial Modification Assessment Guide	PDF
MR-14	Machinery Regulation and CRA Mapping Guide	PDF
01	Licence and Update Policy	PDF

Kit: 41 files (14 templates as 11 Word files with 11 PDF previews and 3 Excel workbooks, 14 guides, Start Here, licence). Worked example: 25 files (11 Word files with their PDF copies and 3 Excel workbooks). 66 files in all.

How the templates work

Clear fill-in points

Text in yellow [brackets] is yours to replace. A blue box at the top of each Word template says how to use it, and amber boxes explain each section; you delete them when the document is final.

Workbooks that calculate

The Excel workbooks rate attack feasibility and risk, count open obligations and missing evidence, and check the mapping to the CRA in both directions.

Provisions listed in every template

Each template ends with a table of the Machinery Regulation provisions it helps you document.

Checked against the sources

Checked on 3 November 2026 against Regulation (EU) 2023/1230 and its corrigendum, Regulation (EU) 2024/2847 where the kit maps to it, and the status of EN 50742.

Files or a platform?

	Machinery Regulation Cybersecurity Kit	Hosted compliance platform
Where your working data is kept	On systems you choose	Depends on the provider and how it is deployed; often in the provider's cloud
Product data you send to a third party	None. When you buy, Polar processes your order details.	Depends on the provider: often design data, interface details and test results
Installation and hosting	None: the files open in Microsoft Office or LibreOffice	Depends on the provider and how it is deployed
Cost	One payment per licence	Usually a subscription; pricing depends on the provider
Records over the 10-year retention period	Your own Word, Excel and PDF files	Depends on the provider, your contract and the export options
Security testing and code scanning	Not included: use your existing tools	Sometimes included

Where your working data is kept
Machinery Regulation Cybersecurity Kit
On systems you choose
Hosted compliance platform
Depends on the provider and how it is deployed; often in the provider's cloud
Product data you send to a third party
Machinery Regulation Cybersecurity Kit
None. When you buy, Polar processes your order details.
Hosted compliance platform
Depends on the provider: often design data, interface details and test results
Installation and hosting
Machinery Regulation Cybersecurity Kit
None: the files open in Microsoft Office or LibreOffice
Hosted compliance platform
Depends on the provider and how it is deployed
Cost
Machinery Regulation Cybersecurity Kit
One payment per licence
Hosted compliance platform
Usually a subscription; pricing depends on the provider
Records over the 10-year retention period
Machinery Regulation Cybersecurity Kit
Your own Word, Excel and PDF files
Hosted compliance platform
Depends on the provider, your contract and the export options
Security testing and code scanning
Machinery Regulation Cybersecurity Kit
Not included: use your existing tools
Hosted compliance platform
Sometimes included

Both approaches can work. The right one depends on where your design data has to stay and which tools you already use.

Licence

One company, all its sites and machines, unlimited internal users. Share the documents you complete with the authorities, notified bodies, customers and dealers who need them. You may send the supplier requirements to your own suppliers, and let an outside consultant work on your documents. Otherwise the blank templates, guides and worked example stay inside your company. Group and consultant licences are available on request.