EU Cyber Resilience Act: What Every Manufacturer Needs to Know
summary
The EU CRA makes a concrete legal shift: manufacturers held liable for product security and five‑year support obligation for devices in market, with 24‑hour reporting for certain vulnerabilities. Expect hardware redesigns to enable secure updates, mandatory threat models and an architectural description, and SBOMs required plus automated monitoring for CVEs. Technical files and public documentation grow far beyond EMC papers, and historical products can be swept into scope alongside RED harmonization.
AI-written summary · about
chapters (9)
- 0:00EU Cyber Resilience Act intro
- 1:52Panel introductions
- 5:46RED versus CRA
- 7:34Manufacturers' CRA duties
- 9:01Secure design changes
- 11:50Secure by design challenges
- 15:43Hardware impacts
- 19:20Compliance with CRA & RED
- 25:25Key takeaways
related talks
30mThe EU's Cybersecurity Resilience Act (CRA) has Begun – How Can Manufacturers Confidently Addres ...
44mThey're coming to regulate you!
32mThe EU Cybersecurity Resilience Act (CRA) - Boring, Scary or Exciting?
22mEU Cyber Resilience Act - A Product Owner’s Approach
33mImplementing the EU Cyber Resilience Act (CRA)
39mCherry Blossom and Compliance - An Intro To the EU CRA
53mHow To Stay Compliant With and Take Benefits From the EU CRA (Cyber Resilience Act)
36mThe CRA roadmap: What to expect