Contact

Are you facing requirements from the CRA, the RED Delegated Act, the Machinery Regulation, or IEC 62443 and want to know which of them apply to your products? Many manufacturers are unsure how regulatory requirements, standards, and technical measures fit together. In a first call, we help you assess your situation and get clarity.

When it makes sense to contact us

Contacting us makes sense especially when you have open questions or doubts, for example in these situations:

  • It is unclear whether and to what extent your products fall under the Cyber Resilience Act, the RED Delegated Act, or NIS2.
  • You are preparing for CE marking, a conformity assessment, or an external audit.
  • You are unsure which product, software, or OT security requirements you actually need to implement.
  • You want an expert second opinion on existing plans, documentation, or roadmaps.

What to expect from the call

The first call is purely for orientation and has a clearly limited scope. It typically covers:

  • An assessment of how regulation affects you at product and process level.
  • A first view of possible gaps, risks, and open points.
  • A rough idea of which next steps are sensible and proportionate.
  • No commitment, no quote, and no sales pitch.

Book a no-obligation first call

If you want to assess your situation objectively and understand which next steps make sense for your company, we invite you to a no-obligation call.

For information on how we process your data, see our privacy policy.

Security & Standards is run by Secuvise GmbH. Your request goes directly to the Secuvise team. Learn more about Secuvise at secuvise.com.

Choosing a CRA consultant? Here is how to find the right one.

Get the guide

Book a call

Send us your request. Together we will look at where your company stands, which questions are still open, and what the sensible next steps are.

For information on how we process your data, see our privacy policy.

Guide: How to choose the right CRA consultant

CRA consulting offers are hard to compare. One provider delivers only a gap analysis, another also supports the technical implementation, and both call themselves “CRA consultants.” If you ask the wrong questions, you end up paying for services you don't need, or you find out halfway through the project that key expertise is missing.

Our guide shows manufacturers what really matters when choosing a provider, from the expertise you need to the right pricing model and the 20 questions you should ask every provider.

What the guide covers:

  • the seven areas of expertise a complete CRA implementation requires
  • four support models depending on your in-house capacity and expertise
  • 20 specific questions for your next provider meeting
  • a red flag card for spotting warning signs quickly
  • a scoring sheet with rating guidance for a structured comparison of providers

Download it for free

Newsletter

For information on how we process your data, see our privacy policy.

Free templates: CRA reporting process

Prepare your company for the reporting obligations under the Cyber Resilience Act. You get process descriptions and templates tested in practice for:

  • reporting actively exploited vulnerabilities
  • reporting severe incidents
  • the required early warning notifications, notifications, and final reports
  • clear responsibilities, escalation paths, and deadlines

Enter your contact details and we will email you the files.

Newsletter

For information on how we process your data, see our privacy policy.

Free template: Risk assessment according to EN 50742

We use this template in our consulting projects for systematic threat assessment. You get an Excel template with:

  • a structured threat assessment for your machinery
  • a systematic way to determine safety-related security levels (SRSL)
  • documentation of vulnerabilities and protective measures

Enter your contact details and you will receive the template within minutes.

Newsletter

For information on how we process your data, see our privacy policy.

Free template: SBOM

We use this template in our consulting projects to meet the CRA requirements for the software bill of materials.

Enter your contact details and you will receive the template within minutes.

Newsletter

For information on how we process your data, see our privacy policy.

Free template: Vulnerability disclosure policy

We use this template in our consulting projects to meet the CRA requirements for vulnerability handling. You get a Word template with:

  • a structure based on EN 40000-1-3
  • predefined sections for reporting channels, response times, and responsibilities
  • safe harbor clauses for security researchers

Enter your contact details and you will receive the template within minutes.

Newsletter

For information on how we process your data, see our privacy policy.