What happened
The CEN-CENELEC work programme shows EN 40000-1-2, Principles, product risk management and lifecycle activities, together with EN 40000-1-1, Vocabulary, at the approval stage with the formal vote closed on 1 October 2026 and ratification planned for 2 November 2026. EN 40000-1-2 answers line 1 of standardisation request M/606. The vulnerability handling standard prEN 40000-1-3 follows, with a shortened four-week formal vote announced by CEN-CENELEC on 2 October 2026.
What it means for machine builders
EN 40000-1-2 is the frame every manufacturer will be measured against: how you run product risk management and the lifecycle activities behind the Annex I requirements. When it is ratified you can buy it and structure your technical documentation on it, even before any citation in the Official Journal. Note that the CEN project pages currently say no citation is expected for these two parts; we are checking that with CEN-CENELEC and will correct this item if needed. Compliance managers should budget for the standard in November and for prEN 40000-1-3 early in 2027.
Official source CEN-CENELEC JTC 13 work programme
Published 16 October 2026 by Edge SDN. A summary, not legal advice. Always check the official text for your case.