Half of German Firms Build Dedicated Teams for EU Cyber Resilience Act
Düsseldorf – September 12, 2026 -- More than half of German industrial companies have assigned internal teams to prepare their connected products for the EU Cyber Resilience Act (CRA), while over 60 percent are also turning to external specialists, according to the new "IoT & OT Cybersecurity Report 2026" from Düsseldorf-based cybersecurity firm ONEKEY. The findings are based on a survey of 200 German industrial companies regarding CRA readiness.
One-fifth of firms have launched full internal CRA teams
Twenty percent of surveyed companies have set up a dedicated internal team to adapt their product range to CRA requirements, while another third have partially assigned staff to the task. Team size varies sharply: 28 percent have assembled groups of up to ten people, and 22 percent have staffed even larger teams. Sixteen percent manage with three or fewer specialists, and 19 percent have assigned no one at all to the issue.