members
Latest posts — page 2
CRA Classification of Embedded Devices: Examples
Per definition, embedded devices are products with digital elements and, hence, must comply with the CRA. I'll give examples whether to classify devices as default, important or critical. The classification decides how expensive CRA compliance is. So, we better get it right.
members
No. 69: Who Defines Minimum Security for Default Products?
Courts will do it! Cybersecurity experts throw a lot of security measures at the wall and see which ones stick. They seriously suggest that manufacturers must only do a "proper" risk assessment and all is fine. Manufacturers define what "proper" means. Isn't that circular reasoning?
How Pre-2028 Products Might Avoid the Cyber Resilience Act
If a machine sold in 2015 receives a feature update in 2028 or later, it must undergo full CRA compliance (Article 69.2). The best bet for the manufacturer might be to argue that the CRA violates legal certainty and non-retroactivity of law - constitutional rights in most EU countries.
No. 68: New Offering - CRA Survival Bootcamp
Are you ready for the Cyber Resilience Act? If not sure, check out my new offering. In the CRA Survival Bootcamp, you'll learn how to do CRA compliance on your own. My related posts may help you as well.
Surviving the EU Cyber Resilience Act
What does the CRA require from you to avoid sales bans after 11 December 2027 and penalties threatening the existence of your company? Risk assessment, vulnerability handling and technical documentation. And tough decisions which products to retire.
Overview: Risk Assessment of the Essential Product Requirements
Overview of my posts and talks about risk assessment of the essential product requirements of the EU Cyber Resilience Act (CRA).
members
No. 67: Risk Assessment of Essential Product Requirements: Documenting Risks
The CRA requires manufactures to document the risk assessment. Architecture decision records (ADRs) are the ideal means for that. They also facilitate good discussions about different mitigation options.
members
Risk Assessment of Essential Product Requirements: Mitigating and Reviewing Risks
Episode 66: Better Built By Burkhard
members
Risk Assessment of Essential Product Requirements: Evaluating and Prioritising Risks
Episode 65: Better Built By Burkhard
members
Risk Assessment of Essential Product Requirements: Identifying Risks
Episode 64: Better Built By Burkhard
members
Risk Assessment of Essential Product Requirements: Prerequisites
Episode 63: Better Built By Burkhard