Cyber Resilience Act (CRA)
Requirements for secure products with digital elements.
The Cyber Resilience Act introduces new requirements for cybersecurity of products across their entire lifecycle. It affects manufacturers, integrators, and suppliers of digital products.
What CRA means for your business
- new obligations for product security
- requirement to manage vulnerabilities
- responsibility across the lifecycle
- increased pressure from customers and regulators
WHAT DO YOU NEED TO DO?
Key areas to address
Secure product development
Software Bill of Materials (SBOM)
Vulnerability management
Technical documentation
Communication across the supply chain
HOW KINT HELPS
How we help you address CRA
- Implementation of secure development processes (e.g. IEC 62443, Part 4-1)
- RIsk analysis and threat modeling
- Setup of vulnerability management processes
- Preparation of technical documentation and compliance evidence
- Integration into existing development lifecycle
IEC 62443 as a foundation
IEC 62443 provides a practical framework for implementing CRA requirements, especially in:
- secure development lifecycle
- risk-based approach
- vulnerability management
- documentation and processes
Where we apply this in
- industrial automation
- control systems
- critical infrastructure
- railway systems
