
Outline the course structure and supporting materials for the European Cyber Resilience Act, then apply CRA requirements through templates and a hands-on IoT home security camera example.
Explore the EU Cyber Resilience Act, a regulation guiding secure by default products, life cycle security, data protection, and transparency through a software bill of materials.
Explore Annex III and IV of the Cyber Resilience Act, detailing class one and class two products, their risk-based controls, and the stringent conformity assessments for critical infrastructure.
Manufacturers embed cybersecurity across product life cycle, perform risk assessments, maintain technical files and disclosure policy, notify ENISA within 24 hours; importers, distributors, and authorized representatives ensure conformity and traceability.
Explore how to secure a smart surveillance system under the Cyber Resilience Act by detailing security features, operating environment requirements, vulnerability reporting and update mechanisms, secure disposal, and default encryption.
Learn to prepare the declaration of conformity under the Cyber Resilience Act using Annex four as a template. Include product identification, manufacturer details, conformity statements, and references to harmonized standards.
This course introduces the European Cyber Resilience Act (CRA), providing a clear understanding of its provisions, compliance requirements, and practical steps for implementation. Perfect for cybersecurity professionals, business leaders, and anyone involved in the development or management of digital products, this course will guide you through the essential requirements, annexes, and hands-on processes to ensure your products meet EU cybersecurity standards under the CRA.
The course is divided into two sections. In the first part, we will review the law from a theoretical perspective. For every chapter covered, we will identify and extract the actions necessary to ensure compliance in our products. Once these concepts are well understood, we will move to the practical section of the course, where we will develop processes and apply what we have learned to a real-world scenario.
Participants will explore critical topics such as mandatory cybersecurity measures, post-market monitoring obligations, and the responsibilities of manufacturers and importers. Additionally, you'll gain valuable insights into navigating the annexes, understanding enforcement mechanisms, and implementing security processes to align with EU expectations. By the end of the course, you’ll be equipped with the knowledge and tools to ensure your organization's digital products are secure, resilient, and fully compliant with the CRA.