In our increasingly interconnected world, security is no longer just an advantageous addition to a system, but a basic requirement. This applies in particular to the automation industry, where everyday products are no longer manufactured by isolated machines, but by increasingly efficient device compositions. The Cyber Resilience and System Security (CRASS) research group focuses on researching and designing security mechanisms such as updates and certificates. In doing so, we consider standardization in the context of current developments such as IT/OT convergence and emerging regulatory requirements such as the EU Cyber Resilience Act.