SECURE Open Call Offers up to €30,000 in CRA Funding for SMEs
The second open call of the EU project SECURE has been open since October 1, 2026. Small and medium-sized enterprises (SMEs) can apply for up to €30,000 in CRA funding …
Category - Product Security
How to Choose a CRA Consultant
We have met manufacturers who loaded all the offers for their CRA project into ChatGPT unread and asked which one was best. Others compared only the totals, although one offer …
Security Test Grades in IEC 62443-4-1 and IEC 62443-4-2
Almost every manufacturer tests. Software composition analysis (SCA) runs in the build, alongside a static analysis (SAST) tool. A few in-house test cases run before release, and a procedure somewhere …
CRA Support Period and Security Update Obligations
The Cyber Resilience Act (Regulation (EU) 2024/2847), or CRA, requires manufacturers to provide security updates for their products with digital elements. They must do so for as long as the …
Which EN 18031 Evidence Carries Over to the CRA
Manufacturers of radio equipment have just finished their work on EN 18031: mechanisms identified, applicability justified, evidence filed. From December 11, 2027, the Cyber Resilience Act (CRA) applies, and the …
CVEs, Vulnerability Handling, and Reporting under the CRA
Two statements come up in almost every conversation about the Cyber Resilience Act. The first: “Since September, we have to report every vulnerability.” The second: “And we have to fix …
ISO/IEC 27090 and Security Threats to AI Systems
An AI model runs on the same hardware and in the same software and network environment as any other application. It inherits their vulnerabilities. On top of that come attacks …
Secure Development Lifecycle Requirements under the CRA
Few terms come up as often in discussions of the Cyber Resilience Act as “security by design”, and few are misunderstood as often. Security by design is not an attitude, …
ENISA Secure by Design and Default Playbook
On July 30, 2026, ENISA published the Secure by Design and Default Playbook. It translates 22 security principles into checklists, evidence, and release criteria. It also maps them to the …
Why Security Levels Do Not Add Up Like Safety Integrity Levels
The same equation comes up in project meetings again and again. A product reaches SIL 2, so it also needs SL-C 2, and both describe roughly the same level of …