TRAININGAI
100 hours of AI training where every department left with something that works
Manufacturer of dehumidification and air treatment systems (HVAC)·Manufacturing SME·AI training — general + per functional area
ISO/IEC 42001Lead Implementer — PECB
IEC 62443ISA Expert path — in progress
UNI 11814Certified Innovation Manager — Kiwa
UNI / CT 533Member — Artificial Intelligence
ETSI TC CYBERMember — Cybersecurity
WHY INTEGRATING PAYS OFF
Compliance tackled on a finished product costs more and arrives late
Built in at design time, it becomes a measurable advantage. That's what I see in every project — and it works on three fronts.
01 — SPEED TO MARKET
On the market sooner
Fixing compliance at the end slows the launch, costs more and risks a product recall. Building security and regulatory requirements in from the first design review shortens timelines — compliance stops being the last-minute obstacle.
02 — SUPPLY CHAIN
A qualified supplier, not an excluded one
OEMs and large industrial groups now require compliance from their suppliers as a contractual condition. Those already compliant win the contracts. Those who aren't are ruled out of the selection before they even submit a bid.
03 — BY DESIGN
A product worth more
A product with security by design and CRA and IEC 62443 compliance is more reliable, more updatable, more defensible on the market. Security done well becomes a selling point, not a hidden cost.
THE PACKAGES
Where do you want to start?
Every package stands on its own and has a declared output: you know what you get before you start.
DEADLINE · 11 SEPTEMBER
CRA Reporting Ready
Products already on the market? From 11 September the reporting obligation kicks in. A tested process in 3 weeks.
Training
A team to train on AI, IEC 62443 or both. 4h modules, a deliverable built in the room.
Assessment
Radar (1 day) or Compass (2 days), AI or OT track. Priority gaps and an action plan.
Annual oversight
AI Officer, CRA Compliance Manager, OT Security Advisor: ongoing obligations, kept in hand.
Regulatory Spark — free
45 minutes with a CEO or CTO. Exposure map and direction, in writing within 24 hours.
Custom projects grow out of Compass: ISO 42001, CRA compliance, OT security on a specific plant.
See all servicesWHERE I WORK
Digital products entering the European market
My typical counterpart is the CEO or CTO of an Italian manufacturer with an in-house R&D team and its own product — where supply-chain pressure and regulation demand solid security and governance.
INDUSTRIAL & IIOT — MAIN FOCUS
Machinery and embedded systems
Connected machines, industrial gateways, edge devices, remote access, OT platforms. IEC 62443 and CRA as the framework for security-by-design — from requirement to control to evidence.
MEDICAL & DIGITAL HEALTH
Connected medical devices
Regulated environments that demand lifecycle discipline, evidence and post-market security. Direct experience: I founded and led a medical device to EU and US certification.
CONNECTED CONSUMER
Smart and IoT products
Connected products that need scalable vulnerability management, secure updates and CRA-ready processes.
WORK
What I have already done
CONSULTINGMachineryCRAIEC 62443
What changes with the new Machinery Regulation, before committing resources
Manufacturer of automation cells for sheet-metal processing·Manufacturing SME·CRA + IEC 62443 pre-analysis in the context of the Machinery Regulation
TRAININGAI
AI training where sales and marketing come out with forecasting and segmentation on their own data
Fine jewellery manufacturing·Manufacturing SME·AI training — general + per functional area
FROM THE BLOG
Regulation applied to the product, no fluff
MachineryCRAIEC 62443AI Act
Cybersecurity requirements of the Machinery Regulation: what a manufacturer must actually do
20 Sept 2026
CRANIS2
You are a manufacturer subject to the CRA. Does NIS2 concern you as a company too?
19 Aug 2026
CRA
The Assigned Representative on the SRP: who it is, and how to choose it by company size
12 Aug 2026