Regulation
Certification
Standards
About
- English
- Deutsch

Category - Supply Chain Security

Creating an SBOM for the CRA
Many see the software bill of materials as the big hurdle in the Cyber Resilience Act. They picture an elaborate scan, an expensive tool, and an endless list. A close …
- Published on July 14, 2026
CRA Vulnerability and SBOM Obligations along the Supply Chain
If you buy a machine, you buy the machine. Not the controller inside it, not the bus system, not a supplier's embedded firmware. This distinction regularly causes confusion under the …
- Published on June 11, 2026

Security & Standards

Expert knowledge on cybersecurity regulation, standards, and certification for product security and OT security. Independent information and advice from experienced practitioners. Provided by Secuvise.

All articles
About
Consulting
Contact
Privacy Policy
Legal Notice

Choosing a CRA consultant? Here is how to find the right one.

Get the guide

Book a call

Send us your request. Together we will look at where your company stands, which questions are still open, and what the sensible next steps are.

Your name * (required)

Your email address * (required)

Your phone number

Your message * (required)

Leave this field empty

For information on how we process your data, see our privacy policy.

Thank you for your message. We will get back to you shortly.

Guide: How to choose the right CRA consultant

CRA consulting offers are hard to compare. One provider delivers only a gap analysis, another also supports the technical implementation, and both call themselves “CRA consultants.” If you ask the wrong questions, you end up paying for services you don't need, or you find out halfway through the project that key expertise is missing.

Our guide shows manufacturers what really matters when choosing a provider, from the expertise you need to the right pricing model and the 20 questions you should ask every provider.

What the guide covers:

the seven areas of expertise a complete CRA implementation requires
four support models depending on your in-house capacity and expertise
20 specific questions for your next provider meeting
a red flag card for spotting warning signs quickly
a scoring sheet with rating guidance for a structured comparison of providers

Download it for free

Name * (required)

Company * (required)

Phone number

Email address * (required)

Newsletter Sign me up for your newsletter.

Leave this field empty

For information on how we process your data, see our privacy policy.

Thank you. You will receive an email with the guide in the next few minutes.

Free templates: CRA reporting process

Prepare your company for the reporting obligations under the Cyber Resilience Act. You get process descriptions and templates tested in practice for:

reporting actively exploited vulnerabilities
reporting severe incidents
the required early warning notifications, notifications, and final reports
clear responsibilities, escalation paths, and deadlines

Enter your contact details and we will email you the files.

Name * (required)

Company * (required)

Phone number * (required)

Email address * (required)

Newsletter Sign me up for your newsletter.

Leave this field empty

For information on how we process your data, see our privacy policy.

Thank you. You will receive an email with your files in the next few minutes.

Free template: Risk assessment according to EN 50742

We use this template in our consulting projects for systematic threat assessment. You get an Excel template with:

a structured threat assessment for your machinery
a systematic way to determine safety-related security levels (SRSL)
documentation of vulnerabilities and protective measures

Enter your contact details and you will receive the template within minutes.

Name * (required)

Company * (required)

Phone number * (required)

Email address * (required)

Newsletter Sign me up for your newsletter.

Leave this field empty

For information on how we process your data, see our privacy policy.

Thank you. You will receive an email with your file in the next few minutes.

Free template: SBOM

We use this template in our consulting projects to meet the CRA requirements for the software bill of materials.

Enter your contact details and you will receive the template within minutes.

Name * (required)

Company * (required)

Phone number * (required)

Email address * (required)

Newsletter Sign me up for your newsletter.

Leave this field empty

For information on how we process your data, see our privacy policy.

Thank you. You will receive an email with your file in the next few minutes.

Free template: Vulnerability disclosure policy

We use this template in our consulting projects to meet the CRA requirements for vulnerability handling. You get a Word template with:

a structure based on EN 40000-1-3
predefined sections for reporting channels, response times, and responsibilities
safe harbor clauses for security researchers

Enter your contact details and you will receive the template within minutes.

Name * (required)

Company * (required)

Phone number * (required)

Email address * (required)

Newsletter Sign me up for your newsletter.

Leave this field empty

For information on how we process your data, see our privacy policy.

Thank you. You will receive an email with your file in the next few minutes.

Category - Supply Chain Security

Creating an SBOM for the CRA

CRA Vulnerability and SBOM Obligations along the Supply Chain