CRA Annex I requirements 2(e) and 2(f) both protect data — but confidentiality and integrity are separate obligations that just happen to share a mechanism like TLS. Here's why treating them as one and the same is how compliance gaps get missed.

IEC 62443 is a strong foundation — but it doesn't fully satisfy the EU Cyber Resilience Act. Here's exactly where the gap is and what manufacturers need to close it.