Abstract
The machinery introduced onto the European market starting January 20, 2027, must bear a CE marking in accordance with the new EU Machinery Regulation 2023/1230. The new Machinery Regulation acknowledges a change in machinery in recent years. Indeed, during this period, IT and internet connectivity with the Internet of Things (IoT) have also increasingly expanded within the machinery sector. However, these changes create emerging risks, such as software malfunctions or cyberattacks, and require a “change management” procedure.
The machinery sector has, until now, assessed the safety of its products by analyzing only mechanical, physical, chemical, and layout risks, in accordance with the Essential Safety and Health Requirements. However, to date, few have addressed cyber risks. It is currently necessary to investigate how to incorporate cyber risks into the risk assessment of machinery required for CE marking, without unnecessarily burdening the risk assessment process and while always ensuring the safety of the end user, whether a customer or a worker. The aim of this work is to verify the consolidated methodologies for assessing machine risks and the possibility of integrating cyber risk assessment into existing approaches.
