Cyber Resilience Act guides for manufacturers
Practical preparation for the people who keep a product’s compliance record: Article 14 reporting, SBOMs and the evidence behind the technical file. Documentation guidance for your team’s assessment and approval.
Guide · CRA checklist
CRA compliance checklist: every Cyber Resilience Act step, with the evidence to keep
Free CRA checklist in 8 phases: scope, class, Annex I, SBOM, Annex VII, CE marking, Article 14 reporting, support period, with the evidence per item.
Guide · Article 14 reporting
Preparing a CRA Article 14 report before you open ENISA’s platform
What to have ready for a CRA Article 14 early warning, notification and final report: the awareness time, roles, inputs and deadlines.
Guide · Product evidence
Keeping CRA evidence per product: SBOM, known vulnerabilities and the technical file
How to keep Cyber Resilience Act evidence current per product: SBOM import (CycloneDX, SPDX), OSV.dev vulnerability checks and versioned documents.
Guide · Technical documentation
CRA Annex VII technical documentation: what the file has to contain
Checklist for Annex VII of the Cyber Resilience Act: the 8 items of the technical documentation, the evidence that fits each one and the usual gaps.
Guide · CRA software
CRA compliance software: a buyer's checklist
Choosing CRA compliance software? Check for per-product records, SBOM import, vulnerability rescans, Article 14 deadlines and technical file gaps.
Start with one product family.
Starter covers up to 5 products for $500 per month, net, for businesses. You order it online and pay by card; the workspace is unlocked as soon as the payment is confirmed.