Compliance
CRA for Startups: Lean Compliance With One Engineer
How a resource-constrained startup meets the EU Cyber Resilience Act: self-assessment, one compliance owner, the support duty, and funding options.
Cyber Resilience Act Blog
Analysis and practical guidance on the EU Cyber Resilience Act. Regulation explainers, SBOM tooling, vulnerability workflows, and ENISA reporting, written for manufacturers, importers, and distributors.
Compliance
CRA and NIS2: Where the Two Regulations Overlap
Understanding how CRA and NIS2 interact. A practical guide for organizations that manufacture products and operate critical services.
Country & Market Guides
CRA vs UK PSTI: Compliance Guide for EU and UK Markets
Comparing the EU Cyber Resilience Act with the UK PSTI Act: key differences, where they overlap, and dual-compliance strategies for both markets.
Vulnerability Management
VEX for CRA: Vulnerability Exploitability eXchange Guide
How to use VEX (Vulnerability Exploitability eXchange) for CRA compliance: formats, status types, SBOM integration, and practical examples.
Vulnerability Management
CRA vs ISO 27001: The Compliance Gaps Your ISMS Won't Cover
Does ISO 27001 cover the Cyber Resilience Act? Not fully. Maps the exact gaps, what your ISMS transfers, and what you still need before the 2027 deadline.
Compliance
CRA Compliance Cost: How to Budget for Conformity
A practical framework to budget CRA compliance: conformity-assessment cost by product category, tooling investment, and ongoing maintenance.
Stay in the loop
Get notified when we publish new articles about CRA compliance and product security.