Cyber Compliance Blog
Here you’ll find practical content, tips, and news on Cyber Resilience Act compliance and product security.
CRA for Existing Products: Four Paths for Your Portfolio
CRA for existing products is the real challenge for most manufacturers: the EU Cyber Resilience…
CRA Penalties for Non-Compliance: The Three Tiers
Cyber Resilience Act penalties make compliance non-optional. Under the EU Cyber Resilience Act (Regulation (EU)…
CRA Readiness Check: Can Your Organisation Carry the Cyber Resilience Act Duties?
Our free readiness check asks eight questions to show whether your organisation can carry the…
CRA Online Check: See Which Products Fall Under the Cyber Resilience Act
Our free CRA online check reads your public product pages and shows, product by product,…
Implementing the Cyber Resilience Act Without Excel Chaos
How manufacturers implement the Cyber Resilience Act with one end-to-end workflow instead of scattered Excel…
CRA Delegated Regulation 2026/881: Delaying Notifications
The Cyber Resilience Act delegated regulation on delaying information sharing is no longer a draft:…
CRA Vulnerability Reporting Obligations: The Full Chain
Cyber Resilience Act vulnerability reporting is one of the sharpest duties in the EU Cyber…
CRA Reporting from 11 September 2026: 10 Misconceptions
Article 14 of the EU Cyber Resilience Act (Regulation (EU) 2024/2847) takes effect on 11…
CRA Reporting Deadlines and the ‘Becoming Aware’ Trigger
Under the CRA the reporting clock starts the moment you become aware. From 11 September…
CRA Reporting Obligations: What Begins 2026 vs 2027
The Cyber Resilience Act reporting obligations arrive in two stages. Under the EU Cyber Resilience…
CRA Single Reporting Platform: What the Update Means
The CRA Single Reporting Platform is moving from concept to implementation. ENISA’s updated FAQ details…
CRA SRP Registration: How to Register for and Use the Single Reporting Platform
A step-by-step guide to Cyber Resilience Act SRP registration: EU Login, assigned representatives, manufacturer entity…
The Cyber Resilience Act Single Reporting Platform (SRP) Explained
From 11 September 2026, manufacturers report actively exploited vulnerabilities and severe incidents through the Cyber…
Microsoft Threat Modeling Tool & Excel vs. COMPLYD
Microsoft Threat Modeling Tool & Excel vs. COMPLYD, or: How Much of Your CRA Conformity…
From Draft to Final: What Actually Changed in the Commission’s CRA Guidance
On 3 March 2026, the European Commission published its draft guidance on the Cyber Resilience…
When CRA Non-Compliance Becomes Civil Liability: Understanding the New Product Liability Directive (2024/2853)
Most discussion of the EU Cyber Resilience Act (CRA) focuses on regulatory enforcement: market surveillance…
CRA Meets the AI Act: When Your Product Is Both a PDE and a High-Risk AI System
A growing share of products with digital elements (PDEs) now incorporate artificial intelligence, from biometric…
Substantial Modifications and the Support Period: Managing the Compliance Clock Under the CRA
The EU Cyber Resilience Act (CRA) introduces two closely related concepts that, taken together, determine…
Secure SDLC & Cyber Resilience Act – The Complete Guide
What a secure development process looks like and where the new EU obligations specifically apply.…
CRA Compliance: Our Contribution To Software Quality Days 2026
Event Recap: CyberUp in Cooperation with COMPLYD at Software Quality Days 2026 in Vienna At…
NIS2 & CRA: The Supplier’s Survival Guide to the New EU Cybersecurity Rules
With the EU Cyber Resilience Act (CRA) entering its first enforcement stage on 11 September 2026…
NIS & CRA: Summary Of Our Talk In Leipzig – Schutz und Leittechnik Tutorial 2026
Event Recap: CyberUp in Cooperation with COMPLYD at the VDE FNN/ETG Schutz- und Leittechnik Tutorial…
CRA and the EU Machinery Regulation: One Risk, Two Regulations – One Assessment
With the Cyber Resilience Act (CRA) and the EU Machinery Regulation (EU) 2023/1230, manufacturers of…
Why Machinery and Plant Manufacturers Should Recognize Their Systems as CRA Products
Across Europe, manufacturers of machinery and industrial plants are preparing for the impact of the…
Compliance Info: Understanding the New CRA Guideline – What Manufacturers Need to Know
With the publication of the European Commission’s Draft Guidance on the Cyber Resilience Act (CRA),…
whoami: Daniel
Who am I? I am Mag. Daniel Jabornig, I support COMPLYD in a strategic technical…
What We Learned From Our CRA Pilot Customers
What Our Pilot Customers Taught Us About CRA Compliance — And Why a New Approach…
whoami: Obelix
Who am I? Woof! I’m Obelix, COMPLYD’s Chief Wellbeing Woofficer and full‑time four‑legged productivity enhancer.…
whoami: Jakob Hinterholzer
Who am I? I’m Jakob, a Frontend Developer at FAW since 2023 and currently pursuing…
CRA Insights Part IV: Navigating Paths to Conformity
The EU Cyber Resilience Act (CRA) is transforming how cybersecurity is regulated for products with…
whoami: Alexander Aigner
Who am I? Hi! I’m Alexander, but most people just call me Alex. I’ve spent…
whoami: Robert Starzer
Who am I? With 25 years of hands‑on software engineering, I specialize in Java architecture…
Security Pulse: BSI Named as Germany’s Notified Body for the CRA
The Federal Office for Information Security (BSI) has officially been designated as Germany’s notified body…
CRA Insights Part II: Threat Modeling
The EU Cyber Resilience Act (CRA) sets a new baseline for product cybersecurity in the…
On the Agenda: Field Notes
Early Implementation Lessons from the EU Cyber Resilience Act As the EU Cyber Resilience Act…
whoami: Stephan Hutterer
Who am I? As a cybersecurity enthusiast, I’ve spent most of my career protecting critical…
CRA Insights Part I: Understanding the Impact of the EU Cyber Resilience Act
The EU Cyber Resilience Act (Regulation (EU) 2024/2847, CRA) marks a significant shift in how…
COMPLYD software platform coming soon. Who we are and why we do that.
Taking care of product security is becoming increasingly fundamental for the success of modern products.…