No. 75: CRA Reporting: Must Your Team Be On Duty 24/7?
A common claim: From 11 September 2026, manufacturers must have a cybersecurity team on duty 24/7 to submit early warning notifications within 24 hours. No matter how many cybersecurity professionals claim this, it's wrong!
Read next
A Pragmatic Approach to CRA Risk Assessment
In less than 30 minutes, I can explain a pragmatic approach how to model the threats of an embedded system, assess the cybersecurity risks and document the risks in security decision records (SDRs). Here is the video from my talk at the Torizon CRA Summit in Munich.