Managed Security Services: CISO Does Not Bear Sole Liability
Benedikt Langer
8 min. read In many organisations, the CISO is seen as the person who stands accountable for security. ...
8 Min. Read Time
Hannover Messe 2026 has produced a message that will end up as a keynote slide in most CIO reports. The substantive question, however, is a different one: Which of the three layers discussed under the term Industry 5.0 necessitates investment decisions that still need to be made in 2026 – and which are long-term positions without budget relevance until 2028?
Key Takeaways
RelatedShadow AI Governance: What CIOs Must Regulate Now / Edge Computing in Production: ThinkEdge SE60n Gen 2
What is Industry 5.0? Industry 5.0 is the EU framework concept that expands the digitalization of industry (Industry 4.0) by three dimensions: human-centric production, resilience to geopolitical shocks, and sustainability requirements. Unlike Industry 4.0, it is not a technology standard, but a political objective with concrete regulatory implications.
The Hannover Messe 2026 (April 20-24) had a clear leitmotif: connectivity as a prerequisite, not an expansion goal. The keynotes from industry heavyweights, from Siemens to Bosch to SAP, addressed all three layers of the Industry 5.0 framework – but with very different levels of concretization.
Interoperability was the topic with the highest level of concretization. OPC UA, Asset Administration Shell (AAS), and MQTT as the foundational layer for machine-to-machine communication were no longer a vision, but a demo. Anyone who said in 2024, “we are observing standardization,” will need to explain themselves in 2026 – because competitors are already showcasing productive installations at their stands at the fair.
Data Spaces were the topic with the greatest political energy. EU Commissioner Vestager positioned Catena-X as a blueprint for cross-sectoral Data Spaces. The message for
67 percent of German industrial companies use OT systems older than 10 years (Bitkom Industry Survey 2025). That sounds like technical debt. It is a strategic roadblock. Interoperability – the fundamental prerequisite for Data Spaces and energy-conscious production – requires OT connectivity. Without OPC UA or comparable connectivity layers, no AAS interface can be built, no Catena-X data point can be read.
The CIO decision most frequently postponed is the OT connectivity budget item. This is not due to a lack of insight, but to organizational dynamics: OT often belongs to production
Three points that belong on a board agenda. Not as a vision, but as a budget item:
1. Request an OT Connectivity Budget. Without an OT connectivity layer, Industry 5.0 is a PowerPoint strategy. Specifically: Protocol mapping (OPC UA, MQTT, Profinet) for the three most critical production lines. Budget: 150.000-400.000 EUR depending on complexity. Amortization typically through productivity increases and quality cost reduction in 18-24 months.
2. Define a Data Space Use Case. Don’t “evaluate” Catena-X – define a concrete use case (PCF, Predictive Maintenance, quality data), identify a partner, limit the pilot scope. Timeline until Q3 2026: Feasibility completed.
3. Close EnEfG Compliance Gaps. The Energy Efficiency Act obliges companies with an energy consumption of 2.5 GWh/year or more to introduce an energy management system. Those who do not yet have an ISO-50001 certificate now need a gap analysis. The EU Taxonomy makes energy efficiency reporting a prerequisite for access to financing.
“Industry 5.0 is not a technology stack. It is a call to C-level decision-makers to interpret three layers of regulation simultaneously as an investment program – instead of waiting for the next keynote.”
– Eva Mickler, digital-chiefs.de
Industry 4.0 focuses on automation, connectivity, and data analysis in production. Industry 5.0 expands this concept with three dimensions: human-centric collaboration between people and machines, resilience to supply chain and geopolitical shocks, and sustainability as a design principle. Industry 5.0 is not a successor, but an expanded framework.
Catena-X is an industry-wide data space for the automotive industry, enabling standardized data exchange along the entire supply chain. As of Q1 2026, over 340 companies are actively involved, including BMW, Mercedes, Volkswagen, and their Tier-1 suppliers. The Product Carbon Footprint (PCF) use case is productively in use.
The Energy Efficiency Act (EnEfG) obliges companies with an annual energy consumption of 2.5 GWh or more to introduce an energy management system (ISO 50001) or an environmental management system (EMAS). Companies with 7.5 GWh or more must implement economically viable energy efficiency measures. The EU Taxonomy links access to green financing to energy efficiency verification.
Depending on the complexity of the plant landscape, the budget for an OT connectivity project (protocol mapping on 3 production lines) typically ranges between 150.000 and 400.000 EUR. The amortization period is 18-24 months if productivity increases and quality cost reductions are factored in as benefits. EU funding via the Horizon program is still available.
No – but companies in the automotive supply chain are increasingly being mandated by OEMs to provide PCF data via Catena-X. Outside the automotive industry, there are no comparable obligations yet, but sector-specific Data Spaces are emerging in chemistry, mechanical and plant engineering, and energy generation.
Network
Nearshoring 2026: When the switch pays off (MyBusinessFuture) | GDPR Fines 2026: What SMEs specifically need to check (SecurityToday)
Cover image source: Pexels / Carsten Ruthemann (px:11885179)