The Cyber Resilience Act in your industry

Applicability is industry-specific: typical products with digital elements, the likely Annex III class, the relevant standard (IEC 62443, ETSI EN 303 645, RED-DA) and the SBOM reality – concrete per sector.

Kontakt aufnehmen

CRA in consumer IoT & smart home

CRA for smart-home makers: routers, IP cameras and smart locks as PDE, ETSI EN 303 645, RED-DA delineation and the SBOM reality. Clarify your scope now.

CRA in building technology & building management systems

CRA for building automation and BMS: PDE scope, Annex III class, IEC 62443 and SBOM in KNX/BACnet landscapes. With a practical example — check your duties now.

CRA in energy & smart metering

CRA for energy and smart metering: the smart meter gateway as a critical product under Annex IV, notified body, IEC 62443 and SBOM duty. Assess your scope now.

CRA in electronics manufacturing, EMS & supply

CRA for EMS providers and OEM suppliers: who is the manufacturer? PDE components, Annex III class and SBOM hand-off in the supply chain. Clarify your role now.

CRA in charging infrastructure & e-mobility

CRA for charging infrastructure: wallboxes and chargers as PDE, Annex III class, OCPP/ISO 15118, IEC 62443 and SBOM reality. With an example — check now.

CRA in robotics & drones

CRA for robotics and drones: PDE scope, Annex III class, IEC 62443, delineation from the Machinery Regulation/EASA and SBOM reality. Check your scope now.

CRA for payment & POS terminals

CRA for payment hardware: POS terminals as PDE, Annex III class, relationship to PCI PTS/PCI DSS and SBOM reality. With an example — clarify your duties now.

CRA for network & security hardware

CRA for network and security hardware: firewalls as Annex III class II, VPN/routers/SIEM/PKI as class I, IEC 62443 and SBOM reality. Determine your class now.

CRA for AI & ML products

CRA for AI/ML products: when an AI product is a PDE, the relationship to the AI Act, AI models in the SBOM and adversarial risks. With an example — assess now.

CRA & automotive: the delineation

CRA and automotive: why type-approved vehicles are exempt (UNECE R155), but digital retrofit and accessory components may fall in scope. Clarify the line now.

CRA & telecom/radio equipment: RED-DA delineation

CRA and radio equipment: relationship to the RED Delegated Act (Reg. (EU) 2022/30, Art. 3.3 d/e/f), transition periods and dual regulation. Clarify it now.

Kontakt aufnehmen

Request an industry-specific CRA assessment

We classify your product lines into the Annex III classes, clarify the standards delineation and build the SBOM/reporting chain – concrete for your sector.

Request a consultation