Vulnerability Management
VEX for CRA: Vulnerability Exploitability eXchange Guide
How to use VEX (Vulnerability Exploitability eXchange) for CRA compliance: formats, status types, SBOM integration, and practical examples.
Cyber Resilience Act Blog
Analysis and practical guidance on the EU Cyber Resilience Act. Regulation explainers, SBOM tooling, vulnerability workflows, and ENISA reporting, written for manufacturers, importers, and distributors.
Vulnerability Management
CRA vs ISO 27001: The Compliance Gaps Your ISMS Won't Cover
Does ISO 27001 cover the Cyber Resilience Act? Not fully. Maps the exact gaps, what your ISMS transfers, and what you still need before the 2027 deadline.
Compliance
CRA for Automotive Suppliers: UN R155/R156 and Aftermarket
How the CRA applies to automotive suppliers and aftermarket parts: the vehicle type-approval exemption, ISO/SAE 21434 alignment, and which components need CRA.
Compliance
CRA Compliance Cost: How to Budget for Conformity
A practical framework to budget CRA compliance: conformity-assessment cost by product category, tooling investment, and ongoing maintenance.
Compliance
CRA for Consumer IoT: EN 303 645 and Smart Home Security
How the CRA applies to consumer IoT: default-category duties; Annex III Class I for smart-home security, social/tracking toys and health/children's wearables.
Compliance
CRA for Industrial Automation: IEC 62443 and OT Security
How the CRA applies to industrial automation and OT: IEC 62443 alignment, why most PLCs and SCADA are default-category, and what raises the class.
Stay in the loop
Get notified when we publish new articles about CRA compliance and product security.