网络及信息安全保护信息系统与数据，有效防范网络威胁。
2 days
EN
Online/Offline
Course Introduction
The EU Cyber Resilience Act (CRA) is currently one of the world's strictest cybersecurity compliance regulations for software and hardware, mandatorily constraining the full lifecycle security of all digital products, software and hardware devices, and IoT devices entering the EU market. EN 40000 1 3, as the CRA official harmonized standard, provides actionable technical and management details for enterprise vulnerability management compliance. This course focuses on CRA legal mandatory requirements EN 40000 1 3 special standard. On the basis of a general vulnerability management system, it adds EU compliance-specific requirements (SBOM, CVD coordinated vulnerability disclosure, compliance reporting), helping enterprises exporting to the EU meet statutory compliance requirements and avoid product sales bans, fines and recall risks.
Training Benefits
- Comprehensively master mandatory compliance clauses for vulnerability management under the EU CRA regulation;
- Deeply interpret the processes, specifications and compliance requirements of the EN 40000 1 3 harmonized standard;
- Reuse a standardized vulnerability management implementation system and adapt it to EU compliance scenarios;
- Master SBOM management requirements, CVD coordinated disclosure, and EU compliance vulnerability reporting and release special capabilities
Target Participants
- Software and hardware manufacturers and IoT device enterprises exporting to the EU
- Compliance heads and security heads of cross-border technology enterprises
- Vulnerability management specialists, product safety heads
- SBOM management personnel, foreign trade compliance management personnel
Course Outline
- Overall compliance framework of the EU CRA regulation
- Interpretation of special clauses on vulnerability management in the CRA regulation
- Full-dimensional interpretation of the EN 40000 1 3 harmonized standard
- Interpretation of core CRA+EN 40000 1 3 compliance processes
- Vulnerability management team and compliance system establishment
- Standardized full-lifecycle vulnerability handling practice
- CRA-specific SBOM product material management special requirements
- EN 40000 1 3 standard CVD coordinated vulnerability disclosure special practice
- CRA compliance system documents and compliance ledger establishment
- Course final assessment