Bosch Rexroth is a member of the Bosch Group, a global technology powerhouse with German roots and a turnover of 90 billion euros. With a presence in 80 countries worldwide, Bosch Rexroth brings its automation expertise to markets across the globe. In Finland, Bosch Rexroth operates across two sites with a team of around a hundred people.
Bosch Rexroth is a leading provider of industrial automation, and a pioneer in the field of cybersecurity. "Our Security Advisories portal has been up and running since 2016, cataloguing identified cyber threats and their remedies – well ahead of the CRA regulation which will mandate these very practices," says Olli Sihvo, Division Manager, Automation at Bosch Rexroth.
As a technology provider whose roots lie in traditional automation, the company is uniquely positioned to bring IT and OT together.
Bosch Rexroth launched its flagship ecosystem, ctrlX AUTOMATION, a decade ago in direct response to the global megatrend of converging IT and traditional OT systems. Bosch Rexroth describes ctrlX as "secure by design", meaning that cybersecurity is baked into the very DNA of the ecosystem. The solution integrates traditional OT environments with IT systems in a secure and future-proof way, and is fully CRA-ready, anticipating the requirements of the forthcoming regulation.
"Most PLCs have remained static for decades, leaving them ill-equipped to handle cyber threats. Our ctrlX OS is the first open, Linux-based operating system purpose-built for industrial environments. We provide interfaces to both traditional OT hardware and software and to modern IT systems, bringing the two worlds together in a secure way," Olli Sihvo explains.
"Businesses are only just beginning to grasp the scale of the risks posed by cyber threats. The penalties set out in the CRA legislation are proving a powerful incentive. The slow uptake is understandable as IT businesses have typically been early adopters, accustomed to open interfaces and agile technologies, whereas companies operating in the OT space tend to be more conservative and have historically worked with closed systems."
Sihvo emphasises that the moment to act is now, with the CRA deadline at the end of 2027 fast approaching. A significant proportion of solutions currently in use do not meet the standard. "This goes beyond technology; the processes for identifying and reporting vulnerabilities must also be firmly in place."
All stakeholders, buyers and service providers alike, must step up to accelerate the transition. Buyers should require their service providers to be fully CRA-compliant, while service providers must be vocal about their readiness. Ultimately, it is the end user who will bear the brunt when production grinds to a halt in the event of a cyber attack.
“The OT Cyber Security Summit Finland 2026 sold out in no time – a telling sign of just how much the industry needs a forum for discussing these topics. OT security is an issue that touches everyone, and as technology providers, it is our responsibility to help spread awareness,“ says Olli Sihvo.
“We’re hoping to see an even stronger turnout next year. Tampere is a great venue for an event of this kind, being centrally located and easy to reach. It will be interesting to see what solutions our fellow industry players bring to the table. We’re not in this alone, and collaboration is key in moving the field forward.”
Olli Sihvo, Division Manager, Automation at Bosch Rexroth
Olli Sihvo heads up Bosch Rexroth's automation business in Finland. A graduate of Helsinki University of Technology at Otaniemi with a master's degree in engineering, he has spent twenty-five years working across a wide range of roles in the automation sector.
Bosch Rexroth is one of the world’s leading suppliers of drive and control technologies, delivering efficient, powerful, and safe motion solutions for Industrial, Mobile and Factory Automation Applications. With expertise in hydraulics, electric drives, linear motion and IoT-enabled systems, the company operates in over 80 countries. In Finland our service business strategy focuses on delivering comprehensive solutions, offering customers expert support in consulting, engineering, assembly and maintenance, including commissioning and training.
Read more >>