网络及信息安全保护信息系统与数据，有效防范网络威胁。
2 days
EN
Online/Offline
Course Introduction
The EU Cyber Resilience Act (CRA) officially came into effect on December 10, 2024, imposing comprehensive cybersecurity requirements on products with digital elements. This training first positions the CRA within the EU regulatory system, and then explains in depth the specific requirements of the CRA for products, covering basic cybersecurity requirements, manufacturer vulnerability handling procedures, reporting obligations, technical documentation and conformity assessment obligations, etc. After clarifying legal requirements, the training will combine international standards such as ISO/IEC 27001, ISO/IEC 27002, ISO/IEC 27005, ISO/IEC 27034, ISO/IEC 27035 and BSI and NIST practical guidelines to discuss how to meet compliance requirements through practical operations. Key dates: June 11, 2026 implementation of conformity assessment body requirements, September 11, 2026 reporting obligations take effect, December 11, 2027 CRA fully effective
Training Benefits
- Systematically understand and master the legal requirements and obligations of all parties stipulated by the CRA for products with digital elements
- Obtain practical operational guidance for new legal requirements, prepare for compliance, and ensure products can continue to be sold in the European market
- Effectively avoid penalties and fines caused by non-compliance
Target Participants
- Manufacturers selling digital element products in the EU; experts and executives in product development, quality management, regulatory affairs and IT security
Course Outline
- Legal basis, legal background and scope of application of the Cyber Resilience Act (CRA), and key dates to consider
- Basic cybersecurity requirements
- Manufacturer responsibilities
- Relevant competent authorities and their interactions
- Obligations of other stakeholders, and when manufacturer obligations also apply to these stakeholders
- General obligations under the CRA (maintaining confidentiality) and sanctions
- Guidelines of the European Commission
- Practical guidance based on international and national standards and specifications: