The Cyber Resilience Act (CRA) is becoming increasingly relevant and concrete for many companies: Does the CRA apply to my product? Which requirements do I need to meet? Which processes are already covered – and where are gaps? The OCCTET CRA Self-Assessment Platform is designed to help answer these questions. The updated version has been validated and is now live

A score of 9.8 tells you how severe a vulnerability is in the lab. It does not tell you whether your product is affected, whether anyone is exploiting it, and what you should address first on Monday morning. Forty Critical Findings Are Not an Agenda The process is almost always the same in every product team. The release is two

How the new SBOM standard is transforming software supply chain management and why it is critical for your CRA compliance Bitsea GmbH · July 2026 · Reading time: approx. 8 minutes Introduction: A Standard in Transition The Software Bill of Materials (SBOM) has evolved from a niche topic into a regulatory requirement over the past few years. With the EU

When a Security Incident Happens Outside the EU: Does the CRA Still Apply? The global nature of cybersecurity raises a practical question for manufacturers. If an actor exploits a vulnerability outside the European Union, do the Cyber Resilience Act (CRA) reporting and remediation obligations still apply? The short answer is yes. If a manufacturer places a product on the EU

As cars become more like computers on wheels, cybersecurity is becoming a major concern. With vehicles now connected to the internet and relying heavily on software, protecting them from cyber threats is essential. The Cyber Resilience Act (CRA) is a new European law designed to improve cybersecurity for digital products. While it does not directly apply to cars themselves (since