Tag

#cra

29 posts0 followers

Explore Hashnode

Alternatives

404 Founders5d ago · 11 min read

CRA SBOM Requirements: What Software Manufacturers Must Document by December 2027

Annex I, Part II, point (1) of Regulation (EU) 2024/2847 requires manufacturers to identify and document vulnerabilities and components contained in products with digital elements, including by drawin

404-founders.com

404 FoundersOct 15 · 9 min read

CRA Conformity Assessment: No Harmonized Standards Cited Yet, Still Obligated

This is the question on the minds of many manufacturers in Europe: how to comply to the CRA, since it requires conformity assessments. And the harmonized standards that were meant to facilitate that a

404-founders.com

Tony RobinsonOct 14 · 6 min read

CRA Incident Reporting 2026: Update Your NIS2, DORA, GDPR Runbook

Since 11 September 2026, a new regulatory clock has been running for every manufacturer selling connected products in the EU. The Cyber Resilience Act (CRA) reporting duties are now live, and they sit

vistainfosec-narendarshaoo.hashnode.dev

404 FoundersSep 11 · 7 min read

CRA Article 14 Is Live: What "Actively Exploited" Means

Applicable from: 11 September 2026Series: EU Cyber Compliance The first operational deadline in the Cyber Resilience Act is now live. From 11 September 2026, manufacturers of products with digital ele

404-founders.com

404 FoundersSep 4 · 6 min read

CRA Secure by Default: What Manufacturers Need to Remove Before December 2027

A device can be fully patched and still ship with an avoidable attack surface. A management port is open on every interface. Remote administration is enabled when most deployments never use it. One sh

404-founders.com

404 FoundersSep 3 · 9 min read

CRA Article 14 Reporting Starts September 11: What Manufacturers Need Ready

On 11 September 2026, the Cyber Resilience Act's mandatory reporting obligations under Article 14 start applying. The obligation is narrower than many summaries suggest, but the operational window is

404-founders.com

404 FoundersAug 25 · 10 min read

CRA Reporting Starts September 11: Build the 24-Hour Vulnerability Pipeline Now

September 11 changes the incident workflow From 11 September 2026, manufacturers covered by the Cyber Resilience Act must report actively exploited vulnerabilities and severe incidents affecting the s

404-founders.com

404 FoundersJul 10 · 6 min read

CRA Vulnerability Reporting Starts September 11: What Manufacturers Must Do

Starting September 11, 2026, manufacturers selling products with digital elements in the EU must report actively exploited vulnerabilities within 24 hours via the CRA Single Reporting Platform. This i

404-founders.com

404 FoundersJul 10 · 5 min read

CRA Annex I: The 13 Security Requirements Every Connected Product Must Meet

Your product connects to a network and you sell it in the EU. By December 11, 2027, it must meet 13 essential cybersecurity requirements defined in CRA Annex I, Part I. These are not guidelines. They

404-founders.com

404 FoundersJun 27 · 4 min read

CRA Penalties: Three Tiers of Fines You Need to Know

The CRA does not have a single penalty level. It uses a three-tier structure where the fine depends on what you got wrong. Missing a reporting deadline, shipping a non-compliant product, and providing

404-founders.com

Search Hashnode

Explore Hashnode

Trending tags this week

CRA SBOM Requirements: What Software Manufacturers Must Document by December 2027

CRA Conformity Assessment: No Harmonized Standards Cited Yet, Still Obligated

CRA Incident Reporting 2026: Update Your NIS2, DORA, GDPR Runbook

CRA Article 14 Is Live: What "Actively Exploited" Means

CRA Secure by Default: What Manufacturers Need to Remove Before December 2027

CRA Article 14 Reporting Starts September 11: What Manufacturers Need Ready

CRA Reporting Starts September 11: Build the 24-Hour Vulnerability Pipeline Now

CRA Vulnerability Reporting Starts September 11: What Manufacturers Must Do

CRA Annex I: The 13 Security Requirements Every Connected Product Must Meet

CRA Penalties: Three Tiers of Fines You Need to Know