Annex I as a control catalog
The essential CRA requirements come as a structured catalog. You assess control by control instead of translating the regulation text into spreadsheets yourself.
ISMS & Risk
CRA Compliance
Products with digital elements: assessed for conformity, reported on time
The Cyber Resilience Act obliges manufacturers of products with digital elements to demonstrate security across the entire lifecycle. The CRA module ships the Annex I requirements as a control catalog, runs the conformity assessment in a structured way and produces the declaration of conformity. Actively exploited vulnerabilities and severe incidents run through a prepared reporting chain with the 24 and 72 hour deadlines. You do not reinvent the evidence: it is mapped to vulnerability management, the risk register, supplier management and the other modules you maintain anyway.
CRA (EU) 2024/2847
Features
Your benefits
Reporting chain for 24 and 72 hours
Early warning after 24 hours, follow-up after 72: the reporting paths for actively exploited vulnerabilities and severe incidents are prepared before an emergency starts the clock.
Declaration of conformity at the press of a button
The completed assessment produces the declaration of conformity (DoC) as a document, versioned and traceable.
Evidence from existing modules
CRA controls reference what is already there: vulnerability management, the risk register, supplier management, attack surface management. One piece of evidence, used many times.
Result
CRA compliance as a guided process instead of regulation reading: assessed against Annex I, ready to report within 24 hours, evidenced from day-to-day operations.
Experience CRA Compliance live
Schedule a no-obligation demo – we will show you the module with your own use cases.