EU Machinery Regulation (EU) 2023/1230
Status: Adopted; applies from 20 Jan 2027 (needs verification)
Replaces the Machinery Directive 2006/42/EC. Its essential health and safety requirements include protection against corruption (including from malicious attempts) and safety-related control system integrity — making cybersecurity of machinery control systems a CE-marking concern for OEMs and integrators.
Who it applies to
- Manufacturers, importers and distributors of machinery and related products placed on the EU market
Why it matters for OT
Machine builders and integrators must address cyber-relevant safety requirements for control systems.
Controls affected & IEC 62443 mapping
| Requirement | Indicative IEC 62443 reference |
|---|---|
| Annex III 1.1.9 protection against corruption; 1.2.1 safety and reliability of control systems | IEC 62443-4-2 (component), 62443-3-3 (system); IEC 62443-4-1 for OEM development |
Annex references and IEC 62443 mapping are editorial — needs verification against final text.
Sources
- EUR-Lex – Regulation (EU) 2023/1230 eur-lex.europa.eu
Monitored for changes: eur-lex.europa.eu. Data file: data/regulations/eu-machinery.yaml. Not legal advice.
Get Machinery Reg. changes in your inbox
What changed in OT/ICS regulation this week, who it applies to, the deadlines, and which IEC 62443 controls it touches — plus a short CISA ICS advisory digest. One email, every week. No spam.
Free. Unsubscribe any time. See privacy.