Insights from Hannover Messe 2025 - Software-defined engineering has arrived
AFRY's Ylva Berg shares her takeaways from Hannover Messe 2025, on cyber security, NIS 2 and the arrival of software-defined engineering
Hannover Messe is the world’s leading industrial trade fair, and this year’s theme, “Shaping the future with technology”, couldn't be more relevant. AFRY’s Head of Digital Services, Ylva Berg, joined industry leaders from Tetra Pak and Siemens for a panel discussion on cyber security and the implications of the EU’s new NIS2 directive. In this article we share a summary of the panel, as well as Ylva’s reflections on the trends and technologies shaping the future of industry.
Panel summary: Cyber security with NIS 2
Today, cyber security is essential to every digital transformation. Did you know that 61% of smart factories have experienced a cyber security incident? And a third of these incidents occur in manufacturing. Ransomware is one of the biggest threats—locking systems, halting operations, and demanding payment to regain access. With the NIS2 directive now being implemented as national legislation across EU member states, industrial companies are working hard to boost their cyber resilience.
How AFRY is aligning our work with NIS 2 standards
At AFRY, we’re not directly required to comply with NIS2, but working closely with our clients means we align with many of its requirements. Since our clients span most of the 18 sectors covered by NIS2, this directive plays a big role in shaping also our cyber security efforts. That’s why we’re expanding our ISO 27001 certification to eventually cover the entire AFRY group.
We’re keeping a close eye on NIS2 implementation across the EU—only nine member states have adopted it into national law so far. While we already meet current cyber security expectations from our clients, we’re excited about NIS2’s focus on board-level involvement, which we see as a step in the right direction.
One example that I’m personally very passionate about is the water and wastewater industry. It’s a sector where we’ve built deep expertise, helping clients align with NIS requirements and strengthen their cyber security. For larger clients, who often have established teams and systems, we support them by optimising network segmentation, securing automation components, and designing safe control networks.
Smaller clients face different challenges, like tighter budgets or limited awareness of what NIS2 will require from them. We’re here to help with practical, cost-effective solutions tailored to their needs. This includes assessing and securing their current systems, isolating networks, and hardening what’s already in place to boost security and resilience without breaking the bank.
Collaboration is key to everything we do at AFRY. We partner closely with Siemens to use reliable components and to design secure, sustainable control networks. By sharing insights and working together, we’re able to deliver solutions that are both safe and future ready.
How AFRY is working with AI and cyber security in general
AI is central to AFRY and our clients. We're actively involved not only as users but also as developers and providers of AI-driven solutions. With AI's potential also come significant responsibilities—particularly around ethical considerations, compliance with legal frameworks, and cyber security.
I would like to mention three key areas we engage in to tackle cyber security for AI-driven solutions:
Awareness. We consistently educate our teams about AI-specific cyber security threats and ethical risks through ongoing internal training and our code of conduct.
Secure-by-design. We intentionally design our systems with security in mind from the outset, alongside functionality and performance. We leverage international standards that guide us in creating robust and resilient AI-solutions.
Secure IT-infrastructure. We ensure the security of the infrastructure hosting our AI applications. We carefully select and collaborate with suppliers who prioritise cyber security, guaranteeing secure and trustworthy solutions for our clients.
Introducing the concept of software-defined engineering
At Hannover Messe 2025, I witnessed firsthand how AI is reshaping our industry—from predictive maintenance and smart energy management to digital twins offering real-time insights. While the potential is immense, the challenge remains: implementing these advanced technologies where they truly make a difference. This led me to reflect on what concept best encapsulates these emerging trends, and I believe the answer is Software-Defined Engineering.
Let’s try to define it: Software-Defined Engineering is a modern approach that seamlessly integrates digital and AI-based solutions with traditional engineering practices. It leverages automation to streamline workflows, delivers real-time data analytics, and ensures scalable, secure operations through future-proof cloud integration. Moreover, by prioritising robust cyber security measures alongside innovation, this approach not only enhances efficiency and agility but also safeguards sensitive data and maintains operational continuity against emerging threats.
Do you think we could define Software-Defined Engineering as the next logical evolution in industrial engineering—one that transcends the limitations of traditional methods and sets the stage for a smarter, more resilient future? Join us in making future!
The value of choosing the right partner for your digital journey
At Hannover Messe, I learned that the right partner will turn digital challenges into success. AFRY combines deep industry expertise with innovative digital, AI, cyber security, and resilience solutions for seamless, integrated transformation.
Are you ready to secure a smarter, more resilient future? Let’s build it together! Read more about AFRY's offerings below and don't hesitate to contact us with your questions.
