We provide full CRA preparation including implementation of Secure-by-Design product development. We offer comprehensive support for software, IoT and SaaS manufacturers in preparing their products for compliance with the Cyber Resilience Act (CRA). We assist throughout the entire process - from requirements analysis and readiness assessment, product classification, through to implementing security measures and vulnerability management processes, and preparing documentation for CE marking. We work with both technical teams and boards, translating complex regulations into a clear and actionable plan.
Scope of support:
1. Obligations assessment and readiness review
- Product classification (whether covered by CRA and in which category)
- Gap analysis against CRA requirements
- Action plan covering scope of changes, priorities, time and cost estimates
2. Secure product design and development
- Implementation of secure software development lifecycle practices (incl. threat modelling, security testing, change control)
- Definition of roles and responsibilities within the company
- Policy and procedure definitions
- Integration of CRA requirements with existing architecture and product development processes
3. Vulnerability and update management
- Development of vulnerability management and security update procedures
- Definition of KPIs and SLA response time standards
- Preparation of incident reporting procedures for supervisory authorities
4. Technical documentation for CE + CRA
- Preparation of documents required for CE conformity
- Collection of compliance evidence and preparation for inspection, conformity assessment or audit
- Preparation of ready materials for clients and certification bodies
What the service includes
- Product classification under CRA (category, scope of obligations)
- Gap analysis and implementation plan
- Secure product design and development assurance
- Vulnerability and update management procedures
- Complete documentation for CE and audit
Who is it for?
- Companies developing software or digital services
- IoT device manufacturers
- Businesses planning to bring products to the EU market
The Cyber Resilience Act is an obligation. We will help you meet it efficiently and safely.
