No. 68: New Offering - CRA Survival Bootcamp
Are you ready for the Cyber Resilience Act? If not sure, check out my new offering. In the CRA Survival Bootcamp, you'll learn how to do CRA compliance on your own. My related posts may help you as well.
Cyber Resilience Act
The CRA forces manufacturers to protect their embedded systems properly against cybersecurity threats. Otherwise, they face heavy penalties and sales bans. We provide practical tips, how to perform a risk assessment, which security measures are enough to satisfy the essential product requirements, how to tame the thousands of vulnerabilities, and whether it's worth to make an embedded system comply with the CRA at all.
Latest posts — page 2
Surviving the EU Cyber Resilience Act
What does the CRA require from you to avoid sales bans after 11 December 2027 and penalties threatening the existence of your company? Risk assessment, vulnerability handling and technical documentation. And tough decisions which products to retire.
Overview: Risk Assessment of the Essential Product Requirements
Overview of my posts and talks about risk assessment of the essential product requirements of the EU Cyber Resilience Act (CRA).
members
No. 67: Risk Assessment of Essential Product Requirements: Documenting Risks
The CRA requires manufactures to document the risk assessment. Architecture decision records (ADRs) are the ideal means for that. They also facilitate good discussions about different mitigation options.
members
Risk Assessment of Essential Product Requirements: Mitigating and Reviewing Risks
Episode 66: Better Built By Burkhard
members
Risk Assessment of Essential Product Requirements: Evaluating and Prioritising Risks
Episode 65: Better Built By Burkhard
members
Risk Assessment of Essential Product Requirements: Identifying Risks
Episode 64: Better Built By Burkhard
members
Risk Assessment of Essential Product Requirements: Prerequisites
Episode 63: Better Built By Burkhard
members
Resources for the EU Cyber Resilience Act
Episode 62: Better Built By Burkhard
EU CRA: Start, Length and End of Support Period
Manufacturers must provide security updates during the support period plus 10 years. The length is calculated from average lifetime, component availability and other criteria. The support period starts when the product is placed on the market.
members
Attacks on Embedded Devices Are Too Easy
Episode 61: Better Built By Burkhard
members
Why the EU Cyber Resilience Act is Important
Episode 60: Better Built By Burkhard