Cyber Resilience Act (CRA)
CRA as a Service – How to make your products secure for the long term
The Cyber Resilience Act requires companies to maintain high cybersecurity standards for products with digital elements – from development through the entire product lifecycle. We’ll guide you smoothly through the compliance process.
What does the Cyber Resilience Act mean for your business?
The Cyber Resilience Act (CRA) affects all manufacturers and suppliers of connected products in the EU.
This means: Without strong security measures, your products may face market restrictions.
What are the most common challenges posed by the CRA?
Our CRA as a service – your path to compliance
Take advantage of our expertise and make your products CRA compliant!
How can asvin help to implement the requirements from the Cyber Resilience Act (CRA)?
What are the Cyber Resilience Act main topics?
A key part of the act is maintaining cybersecurity throughout a product’s lifecycle, including a defined support period with security updates. Every player in the supply chain, from manufacturers to distributors, has specific obligations.
Cyber Resilience Act Readiness Inhouse Workshop
Kick start your implementation today. To support you in planning and implementing the necessary measures and to anchor the topic of the
Cyber Resilience Act in your company, we have developed an in-house workshop for you that will prepare you optimally.
Our workshop offer is primarily aimed at German-speaking companies, and therefore takes place in German. – If your company language is English, please contact us.
What is the Cyber Resilience Act (CRA) about?
The Cyber Resilience Act (CRA) developed by the EU Commission defines standards for the cyber security of connected devices and thus improves the cyber security of products. It does not matter whether the products are connected to the Internet, communicate with each other or via internal interfaces. The CRA applies not only to finished end products, but also to all preliminary products and components. – In other words, all components of the hardware supply chain.
The Cyber Resilience Act (CRA) regulations apply not only to manufacturers of products with digital elements, but also to distributors and importers.
What measures need to be implemented?
The Cyber Resilience Act requires the establishment of risk-appropriate cybersecurity measures for affected products in the design, development and production phases, as well as during marketing and use.
The types of actions vary depending on criticality.
While around 90% of the affected products can be checked in a self-assessment. A third party assessment should be carried out for Critical Class I devices and must be carried out for Critical Class II devices.
