Piotr Polak
Cybersecurity and standardization expert
I help manufacturers turn cybersecurity requirements into secure connected products and practical compliance processes. My current focus is the Cyber Resilience Act: contributing to its standards and connecting its requirements with engineering practice.
Over twenty years at Philips, NXP, and Signify, I have worked on connected-product development, security architecture, and certification. I also contribute to product security standards at CEN-CENELEC, ETSI, the Connectivity Standards Alliance, and the International Telecommunication Union.
Start here
Latest articles
CRA Standardization Request: Deadlines Extended
The Commission has amended standardization request M/606, extending deadlines for risk-based product security, vulnerability handling, and product-specific CRA standards.
Introducing the CRA Standards Tracker
A new page on this site tracks where each harmonized standard for the EU Cyber Resilience Act stands, from drafting to citation in the Official Journal.
EN 40000-1-2: CRA Process Standard Approved
EN 40000-1-2, the horizontal Cyber Resilience Act process standard covering cybersecurity principles, product risk management, and lifecycle activities, has been approved by the CEN-CENELEC formal vote with 100 percent of votes in favor.
CRA Guidance: Public Consultation Closed
The European Commission's consultation on draft CRA guidance ran from March 3 to April 13, 2026. The Commission published the guidance on July 27, 2026 (C(2026) 5252).
RED Delegated Act: Repeal Takes Effect in December 2027
Delegated Regulation (EU) 2026/339 repeals the RED cybersecurity Delegated Act from December 11, 2027. Earlier equipment remains subject to surveillance of the requirements that applied when it was placed on the market.
All articles · Subscribe via RSS for new ones
