CRA-ready with Brinkhaus
From 2027 only products with demonstrable cybersecurity may be marketed in the EU. We have walked that path for our own edge devices and support manufacturers, developers and suppliers on theirs.
What the CRA requires
The Cyber Resilience Act covers every product with digital elements placed on the EU market: controls, edge devices, sensors with software, machine software. Regardless of company size. Reporting obligations for actively exploited vulnerabilities apply from September 2026, the remaining obligations from December 2027.
Among the requirements: a security concept across the life cycle, vulnerability management with a security contact, secure defaults and updates, a software bill of materials, and the technical documentation for the declaration of conformity.
How we support you
- Analysis of your products and processes: what falls under the CRA, in which class, what is missing
- Training for your teams in development, product management and service
- Security risk management introduced and built into development
- Documentation: security concept, vulnerability process, bill of materials, declaration of conformity
- Audit preparation, internal and external
- Optional: assessment of your suppliers
Efficient, practical, scalable. Whether company processes, embedded software, industrial controllers or IoT.
What we can show ourselves
For the openXEdge the security concept, vulnerability management, signed updates and the documents for the declaration of conformity exist. The FleetManager provides the ongoing evidence in the field: which device runs which version, who the customer’s security contact is, when which security check ran. That is the work we take off your hands or build with you.