13.10.2026
Cybersecurity Certified: Balluff Takes the Next Step Toward CRA
With ISO/IEC 27001 certification and its first CRA-ready products, Balluff helps customers efficiently meet future cybersecurity requirements.
Neuhausen auf den Fildern, Germany – Balluff has successfully obtained ISO/IEC 27001:2022 certification for its information security management system. The internationally recognized standard confirms that the company systematically identifies, assesses, and addresses information security risks. Customers and partners benefit from audited processes for protecting relevant information and data—particularly in the development, provision, and support of connected automation solutions.
Audited processes, continuous improvement
The certified scope covers the information-processing operations of Balluff GmbH at its Neuhausen auf den Fildern site—from central sales functions, including the online shop, through product development, manufacturing technology, logistics, and procurement, to IT, human resources, finance, and administration. The information security management system therefore encompasses key interfaces throughout the company's collaboration with customers and partners. Regular audits verify the effectiveness of the measures and support their adaptation to emerging risks.
Handling information securely is a fundamental prerequisite for reliable collaboration with our customers and partners. This certification demonstrates that we manage information security at Balluff in a structured, binding manner and continuously develop it further.
Frank Nonnenmann, Managing Director Supply Chain and Digital at Balluff
Information security as the foundation for CRA-ready products
The certification also supports preparations for the European Cyber Resilience Act (CRA), which establishes binding cybersecurity requirements for products with digital elements. Balluff takes cybersecurity into account throughout the entire product lifecycle: through a Secure Product Development Lifecycle in accordance with IEC 62443-4-1, planned security updates via the Balluff Update Platform, practical documentation for secure integration, and a Product Security Incident Response Team (PSIRT) as the central point of contact for reporting vulnerabilities.
For machine and plant manufacturers, this creates important conditions for handling risk assessments, supplier audits, and subsequent compliance documentation more efficiently. As full compliance with the CRA will not be mandatory until December 11, 2027, Balluff deliberately uses the term “CRA-ready” rather than claiming formal CRA compliance. Balluff already offers its first “CRA-ready”-products, including network modules, fork sensors, and indicator lights, with further product groups to follow.
About Balluff
Founded in Neuhausen auf den Fildern in 1921, Balluff and its 3,700 employees worldwide stand for innovative technology, quality, and cross-industry expertise in industrial automation. Now in its fourth generation, the family-owned company is a leading sensor and automation specialist offering a comprehensive portfolio of high-quality sensor, identification, network, and software solutions.
In 2025, the Balluff Group generated revenue of approximately EUR 501 million. In addition to its headquarters in Neuhausen auf den Fildern, Balluff has sales, production, and development sites around the globe and is represented by 38 subsidiaries and additional offices in 68 countries. This ensures customers benefit from rapid product availability worldwide as well as high-quality consulting and service directly on site.