TagMaster is committed to meeting the EU Cyber Resilience Act (CRA) requirements, with reporting obligations already in place and full product compliance targeted for December 2027. We will work closely with customers to ensure cybersecurity compliance while maintaining operational stability and supporting existing railway system approvals.
CRA Implementation Statement for download:
CRA Implementation Statement
TagMaster’s approach to the EU Cyber Resilience Act (CRA) focuses on timely implementation, clear responsibilities and practical customer cooperation. Cybersecurity has long been a priority in its products and working practices, with CRA implementation building on the work of the established Cyber Security Group. Meeting the CRA requirements involves significant investment in product development, testing, documentation and ongoing cybersecurity support.
TagMaster complies with the CRA reporting obligations applicable from 11 September 2026, with processes to respond to and report relevant vulnerabilities and security incidents. Products subject to the CRA will be ready to meet the applicable requirements by 11 December 2027, when the main product obligations take effect.
In railway applications, software and firmware configurations normally remain fixed after system approval and commissioning. Ongoing cybersecurity requirements may nevertheless require security updates that affect system operation and existing approvals. TagMaster recognizes the challenge this creates for customers in addressing cybersecurity risks while maintaining operational stability and managing changes to approved systems.
CRA compliance is addressed throughout product development and support. For deliveries requiring CRA compliance, the required software and firmware configuration will be applied at the final product configuration stage, before shipment and placement on the EU market. TagMaster products with their original software and firmware configurations will remain available for spare-part deliveries covered by the CRA exemption and for markets not subject to the legislation.
During 2027, TagMaster will support integration testing ahead of the final product release, with specialists available for focused technical discussions on product integration and update procedures. The Cyber Security Group will provide a clear point of contact and coordinate activities around concrete requirements, decisions and delivery milestones.
Product Management
TagMaster AB