| What Is the EU CRA? Who Counts as a Manufacturer and Which Products Are in Scope? |
Clarifies the roles and responsibilities of brand owners, ODMs, importers and distributors under the CRA. |
2026-11-04 |
| EU CRA: Three Key Dates, and Why Existing Models Matter Too |
Summarises the three key dates in 2026/2027 and explains how the CRA applies to existing models that are still being shipped. |
2026-11-05 |
| EU CRA Product Classification and CE Marking: Choosing the Conformity Assessment Route |
Explains the conformity assessment routes for the CRA’s default, Important Class I/II and critical categories, and the documents required for CE marking. |
2026-11-11 |
| EU CRA Essential Cybersecurity Requirements: From Default Passwords to Security Updates |
Summarises the five security design priorities in CRA Annex I and common risks in industrial PCs, networking equipment and energy storage equipment. |
2026-11-13 |
| EU CRA SBOM: Which Software and Firmware Do Industrial PCs Need to Track? |
Summarises the key CRA SBOM points, the software and firmware to inventory in industrial PCs, and four steps for version traceability. |
2026-11-13 |
| EU CRA Vulnerability Reporting: 24-Hour Early Warning and 72-Hour Notification |
Article 14 reporting obligations now apply: 24-hour early warning, 72-hour notification and final report deadlines |
2026-11-13 |
| EU CRA Vulnerability Handling and Support Period: Ongoing Post-Market Responsibilities |
Support period of at least 5 years as a general rule, security updates kept available for at least 10 years from release or until the end of the support period, whichever is longer, and responsibilities for vulnerability handling and third-party components |
2026-11-13 |
| EU CRA System Integration: Connecting PLM, SBOM Tools and Polarion |
You don’t necessarily have to replace your existing PLM: connect SBOM tools and Polarion to build cybersecurity traceability from product version to test and verification |
2026-11-13 |
