Analysis and practical guidance on the EU Cyber Resilience Act. Regulation explainers, SBOM tooling, vulnerability workflows, and ENISA reporting, written for manufacturers, importers, and distributors.
Does ISO 27001 cover the Cyber Resilience Act? Not fully. Maps the exact gaps, what your ISMS transfers, and what you still need before the 2027 deadline.
A practical framework to budget CRA compliance: conformity-assessment cost by product category, tooling investment, and ongoing maintenance.
How the CRA applies to automotive suppliers and aftermarket parts: the vehicle type-approval exemption, ISO/SAE 21434 alignment, and which components need CRA.
How the CRA applies to consumer IoT: default-category duties; Annex III Class I for smart-home security, social/tracking toys and health/children's wearables.
How the CRA applies to industrial automation and OT: IEC 62443 alignment, why most PLCs and SCADA are default-category, and what raises the class.
Country brief for Polish manufacturers under the CRA: CSIRT NASK routing, PCA accreditation, KSC overlap, Polish-language duties, and FENG/KPO funding.
Get notified when we publish new articles about CRA compliance and product security.
