No. 71: Commission Guidance on the CRA - Placing on the Market
The CRA guidance treats placing on the market differently for standalone software and embedded systems. Longer support periods and workarounds cause higher costs for machine and device manufacturers. It would be simple to treat all products the same.
Read next
A Pragmatic Approach to CRA Risk Assessment
In less than 30 minutes, I can explain a pragmatic approach how to model the threats of an embedded system, assess the cybersecurity risks and document the risks in security decision records (SDRs). Here is the video from my talk at the Torizon CRA Summit in Munich.