The Cyber Resilience Act (CRA) redefines quality in connected products

By Jesús Gómez Rio, R&D Director at Multimedia Perspectives.

In a hyperconnected world, the concept of "technical quality" has evolved rapidly. Historically, in the telecommunications and audiovisual distribution sector, we assessed a TV headend system on purely physical and functional parameters: inputs/outputs, MER or ease of use. Today, however, the reality is that an exposed connected device, with vulnerable interfaces or default passwords, is an inherently problematic device, whatever its technical quality.

This evolution is reflected in the Cyber Resilience Act (CRA), the new European regulation that will set mandatory cybersecurity requirements for most connected products sold in the European Union. The regulation, which will apply in full from December 2027, requires manufacturers to build in security by design, ensure vulnerability management throughout the product life cycle and provide secure update mechanisms.

Security by Design is a secure engineering philosophy that we at Fagor Multimedia Perspectives have already been applying when working with premium content and operators. In practice, what will this mean for our customers in the field?

Traditionally, industrial cybersecurity caused friction in deployment, unrequested updates and operational problems. Our engineering has solved this equation by guaranteeing minimal impact on the customer's operations while filtering out cybersecurity threats:

The end of default settings: we say goodbye to the "admin/admin" era. Each of our devices leaves the factory with unique identities (UNIQUE cryptographic keys) stored in its hardware secure element and a unique random password printed on an individual label.

OTA updates with industrial resilience: thanks to a dual-firmware (FW) storage architecture, if a critical failure occurs after a FW update, a hardware watchdog forces an automatic restart, reverting the boot to the previous FW. Users will never experience a total loss of service.

Full traceability through SBOM: every piece of firmware automatically generates a Software Bill of Materials. This allows our incident response team to detect and neutralise any software vulnerability before it affects the customer's network.

Guarantee: our customers will have the certainty that the device's useful life will be covered by security patch support.

In short, the Cyber Resilience Act marks a paradigm shift for the whole industry. For Fagor Multimedia Perspectives, digital resilience is not a patch or a mere regulatory obligation, but the DNA of the technical excellence that defines every product bearing our brand.

28 July 2026