{"id":4068,"date":"2026-07-17T11:21:16","date_gmt":"2026-07-17T11:21:16","guid":{"rendered":"https:\/\/www.carmasec.com\/?post_type=knowledge-center&#038;p=4068"},"modified":"2026-07-23T12:04:20","modified_gmt":"2026-07-23T12:04:20","slug":"cyber-resilience-act-fundamentals-requirements","status":"publish","type":"knowledge-center","link":"https:\/\/www.carmasec.com\/en\/security-knowledge\/cyber-resilience-act-fundamentals-requirements\/","title":{"rendered":"Cyber Resilience Act &#8211; Fundamentals &#038; Requirements"},"content":{"rendered":"\n<section id=\"m-text__container-block_5a16d154d60d5eb45ab30048a79677cd\" class=\"m-text__container u-pt-x8 u-pb-x0 u-pt-x12@md u-pb-x0@md\"><div class=\"o-container u-relative\">\n        <div class=\"o-grid\">\n                <article class=\"o-grid__col u-12\/12@md\" data-aos=\"fade\">\n                    <h2>A free guide &#8211; 28 pages<\/h2>\n<div><\/div>\n<div class=\"obox\"><strong>What you will know after 45 minutes:<\/strong> Whether your products are affected, which deadlines apply now, what Security by Design and SBOM obligation mean for your company and which 5 steps will take you systematically to conformity.<\/div>\n\n                <\/article>\n        <\/div>\n    <\/div>\n<\/section>\n\n\n<section id=\"m-media__container-block_86a69642d9d501cb80c7decac694a357\" class=\"m-media__container u-pt-x4 u-pb-x0 u-pt-x8@md u-pb-x0@md\">\n    <div class=\"o-container\">\n        <div class=\"o-grid o-grid--center\">\n            <div class=\"o-grid__col u-12\/12@md\"><img decoding=\"async\" src=\"https:\/\/www.carmasec.com\/wp-content\/uploads\/2026\/07\/CRA_Bild_Download-3-1024x576.jpg\" width=\"1024\" height=\"576\" srcset=\"https:\/\/www.carmasec.com\/wp-content\/uploads\/2026\/07\/CRA_Bild_Download-3-1024x576.jpg 1024w, https:\/\/www.carmasec.com\/wp-content\/uploads\/2026\/07\/CRA_Bild_Download-3-300x169.jpg 300w, https:\/\/www.carmasec.com\/wp-content\/uploads\/2026\/07\/CRA_Bild_Download-3-768x432.jpg 768w, https:\/\/www.carmasec.com\/wp-content\/uploads\/2026\/07\/CRA_Bild_Download-3.jpg 1366w\" sizes=\"(max-width: 1280px) 100vw, 1280px\" alt=\"Cyber Resilience Act whitepaper shown as a cover and open brochure, featuring a dark blue and orange technology-inspired design.\" class=\"u-full--width u-image--rounded-large\"  \/>\n            <\/div>\n        <\/div>\n    <\/div>\n<\/section>\n\n\n<section id=\"m-text__container-block_a74a980595292651ea7ed98c0a26c869\" class=\"m-text__container u-pt-x4 u-pb-x4 u-pt-x8@md u-pb-x8@md\"><div class=\"o-container u-relative\">\n        <div class=\"o-grid\">\n                <article class=\"o-grid__col u-12\/12@md\" data-aos=\"fade\">\n                    <p class=\"o-type-small\">Our free guide provides you with a compact overview of:<\/p>\n<ul class=\"c-list__checkmark\">\n<li>Why you cannot ignore the CRA \u2013 Security by Design, CE binding, lifecycle obligations<\/li>\n<li>What exactly the CRA regulates \u2013 scope, exceptions, SBOM, Vulnerability Management<\/li>\n<li>What companies are facing now \u2013 obligations, documentation, risk classification<\/li>\n<li>\n<div class=\"n\">Implementation in 5 steps \u2013 Secure by Design to conformity assessment<\/div>\n<\/li>\n<li>\n<div class=\"n\">12-point checklist: Are you really CRA-ready? Misconceptions &#038; insights \u2013 the 12 most common errors with CRA facts<\/div>\n<\/li>\n<li>Conclusion &#038; recommendations for action including prioritized roadmap <\/li>\n<li>Appendix, Deep Dive &#038; Glossary (SBOM, SAST, DAST, TARA, TID and more)  <\/li>\n<\/ul>\n<p>28 pages PDF Free and immediately available<\/p>\n\n                <\/article>\n        <\/div>\n    <\/div>\n<\/section>\n\n\n<section id=\"m-headline__container-block_a84b5175f02c15c44be5b564af009ad8\" class=\"m-headline__container u-pt-x8 u-pb-x4 u-pt-x20@md u-pb-x8@md u-bgcolor-gray-blue\">\n    <div class=\"o-container\">\n        <div class=\"o-grid o-grid--center u-text-center\">\n            <div class=\"o-grid__col u-12\/12@md\" data-aos=\"none\"><h3>What to expect<\/h3><\/div>\n        <\/div>\n    <\/div>\n<\/section>\n\n\n<section id=\"m-tiles__container-block_73f1b7f943f353ec44df28dc9baea948\" class=\"m-tiles__container u-pt-x8 u-pb-x8 u-pt-x20@md u-pb-x20@md u-bgcolor-gray-blue\">\n    <div class=\"o-container\">\n        <div class=\"o-grid\">\n                <div class=\"o-grid__col u-mb-x4 u-6\/12@sm u-6\/12@md\" data-aos=\"flip-up\">\n                \n                    <figure class=\"c-card u-relative u-block u-full--height c-card--gradient u-p-x4 u-p-x8@md\">\n                        \n                        <figcaption class=\"u-relative\"><div><strong>CH. 01<\/strong><\/div>\n<div class=\"cht\"><strong>Why you cannot ignore the CRA<\/strong><\/div>\n<div class=\"cht\">Security by Design, Secure by Default, lifecycle responsibility \u2013 the new EU security understanding and its consequences for CE.<\/div>\n<\/figcaption>\n                    <\/figure>\n                    \n                <\/div>\n                <div class=\"o-grid__col u-mb-x4 u-6\/12@sm u-6\/12@md\" data-aos=\"flip-up\">\n                \n                    <figure class=\"c-card u-relative u-block u-full--height c-card--gradient u-p-x4 u-p-x8@md\">\n                        \n                        <figcaption class=\"u-relative\"><div class=\"chn\"><strong>CH. 02<\/strong><\/div>\n<div class=\"cht\"><strong>What exactly does the CRA regulate?<\/strong><\/div>\n<div class=\"chd\">Scope, affected products, open-source exceptions, SBOM, Vulnerability Management, Patch Management, Identity &#038; Access.<\/div>\n<\/figcaption>\n                    <\/figure>\n                    \n                <\/div>\n                <div class=\"o-grid__col u-mb-x4 u-6\/12@sm u-6\/12@md\" data-aos=\"flip-up\">\n                \n                    <figure class=\"c-card u-relative u-block u-full--height c-card--gradient u-p-x4 u-p-x8@md\">\n                        \n                        <figcaption class=\"u-relative\"><div class=\"chn\"><strong>CH. 03<\/strong><\/div>\n<div class=\"cht\"><strong>What companies are facing now<\/strong><\/div>\n<div class=\"chd\">New manufacturer obligations, technical documentation, SBOM requirements and product classification into three risk categories.<\/div>\n<\/figcaption>\n                    <\/figure>\n                    \n                <\/div>\n                <div class=\"o-grid__col u-mb-x4 u-6\/12@sm u-6\/12@md\" data-aos=\"flip-up\">\n                \n                    <figure class=\"c-card u-relative u-block u-full--height c-card--gradient u-p-x4 u-p-x8@md\">\n                        \n                        <figcaption class=\"u-relative\"><div class=\"chn\"><strong>CH. 04<\/strong><\/div>\n<div class=\"cht\"><strong>Implementation in 5 steps<\/strong><\/div>\n<div class=\"chd\">From Secure by Design through vulnerability management, security response, update processes to conformity assessment &#038; evidence provision<\/div>\n<\/figcaption>\n                    <\/figure>\n                    \n                <\/div>\n                <div class=\"o-grid__col u-mb-x4 u-6\/12@sm u-6\/12@md\" data-aos=\"flip-up\">\n                \n                    <figure class=\"c-card u-relative u-block u-full--height c-card--gradient u-p-x4 u-p-x8@md\">\n                        \n                        <figcaption class=\"u-relative\"><div class=\"chn\"><strong>CH. 05<\/strong><\/div>\n<div class=\"cht\"><strong>Are you really CRA-ready?<\/strong><\/div>\n<div class=\"chd\">The 12-point checklist: from product identification, responsibilities and SBOM to completed conformity assessment.<\/div>\n<\/figcaption>\n                    <\/figure>\n                    \n                <\/div>\n                <div class=\"o-grid__col u-mb-x4 u-6\/12@sm u-6\/12@md\" data-aos=\"flip-up\">\n                \n                    <figure class=\"c-card u-relative u-block u-full--height c-card--gradient u-p-x4 u-p-x8@md\">\n                        \n                        <figcaption class=\"u-relative\"><div class=\"chn\"><strong>CH. 06<\/strong><\/div>\n<div class=\"cht\"><strong>Misconceptions &#038; insights<\/strong><\/div>\n<div class=\"chd\">&#8220;Our IT handles that.&#8221; &#8220;We are too small.&#8221; &#8220;We have CE.&#8221; 12 common errors \u2013 with direct CRA facts and article references.<\/div>\n<\/figcaption>\n                    <\/figure>\n                    \n                <\/div>\n                <div class=\"o-grid__col u-mb-x4 u-6\/12@sm u-6\/12@md\" data-aos=\"flip-up\">\n                \n                    <figure class=\"c-card u-relative u-block u-full--height c-card--gradient u-p-x4 u-p-x8@md\">\n                        \n                        <figcaption class=\"u-relative\"><div class=\"chn\"><strong>CH. 07<\/strong><\/div>\n<div class=\"cht\"><strong>Conclusion &#038; recommendations for action<\/strong><\/div>\n<div class=\"chd\">Prioritized roadmap: assessment, process development, security toolchain, documentation maintenance. Those who start early secure competitive advantages. <\/div>\n<\/figcaption>\n                    <\/figure>\n                    \n                <\/div>\n                <div class=\"o-grid__col u-mb-x4 u-6\/12@sm u-6\/12@md\" data-aos=\"flip-up\">\n                \n                    <figure class=\"c-card u-relative u-block u-full--height c-card--gradient u-p-x4 u-p-x8@md\">\n                        \n                        <figcaption class=\"u-relative\"><div class=\"chn\"><strong>CH. 08<\/strong><\/div>\n<div class=\"cht\"><strong>Appendix &#038; Deep Dive<\/strong><\/div>\n<div class=\"chd\">Complete glossary: ARC42, SBOM, SAST, DAST, EPSS, TARA, TID, CSMS, SSDLC, KEV and more. Additional links and technical notes. <\/div>\n<\/figcaption>\n                    <\/figure>\n                    \n                <\/div>\n        <\/div>\n    <\/div>\n<\/section>\n\n\n<section id=\"m-text__container-block_08de5ee7ef2a8d8e213840183d4d07a5\" class=\"m-text__container u-pt-x8 u-pb-x0 u-pt-x20@md u-pb-x0@md\"><div class=\"o-container u-relative\">\n        <div class=\"o-grid\">\n                <article class=\"o-grid__col u-12\/12@md\" data-aos=\"none\">\n                    <h3 class=\"o-type-medium\" style=\"text-align: left;\">Download the e-book and benefit from the free expertise today.<\/h3>\n<p>How to access your free whitepaper:<\/p>\n<p>1. Complete the form and click &#8220;submit&#8221;.<br \/>\n2. Check your email and confirm your email address.<br \/>\n3. You will receive an email from us with the download link.<br \/>\n4. Visit the download page and download the compact guide.<\/p>\n\n                <\/article>\n        <\/div>\n    <\/div>\n<\/section>\n\n\n<section id=\"m-headline__container-block_d6b6638e73106ec64a1ae09ff9aa67f0\" class=\"m-headline__container u-pt-x8 u-pb-x0 u-pt-x20@md u-pb-x0@md\">\n    <div class=\"o-container\">\n        <div class=\"o-grid o-grid--center u-text-center\">\n            <div class=\"o-grid__col u-12\/12@md\" data-aos=\"none\"><h3>About the authors<\/h3><\/div>\n        <\/div>\n    <\/div>\n<\/section>\n\n\n    <section id=\"m-team__container-block_69b8ee63da70c61a64b67ede41fc33a9\" class=\"m-team__container u-pt-x8 u-pb-x8 u-pt-x20@md u-pb-x20@md\">\n        <div class=\"o-container u-relative\">\n            <div class=\"o-grid\">\n                    <article class=\"m-team o-grid__col u-6\/12@sm u-4\/12@md u-mb-x4\">\n                        <div class=\"o-media o-media--res o-media--middle c-card o-media---x0 u-block u-text-center o-type-small u-full--height u-bgcolor-gray-blue u-ph-x6 u-pv-x6 u-pv-x12@md\">\n                            <div class=\"o-media__fixed\">\n                                <figure class=\"u-image__transition u-inline-block u-relative\"><img decoding=\"async\" src=\"https:\/\/www.carmasec.com\/wp-content\/uploads\/2026\/03\/JSudmeyer-150x150.jpg\" width=\"150\" height=\"150\" srcset=\"https:\/\/www.carmasec.com\/wp-content\/uploads\/2026\/03\/JSudmeyer-150x150.jpg 150w, https:\/\/www.carmasec.com\/wp-content\/uploads\/2026\/03\/JSudmeyer-300x300.jpg 300w, https:\/\/www.carmasec.com\/wp-content\/uploads\/2026\/03\/JSudmeyer-768x768.jpg 768w, https:\/\/www.carmasec.com\/wp-content\/uploads\/2026\/03\/JSudmeyer.jpg 1024w\" sizes=\"(max-width: 200px) 100vw, 200px\" alt=\"Portr\u00e4tfoto von Jan Sudmeyer, Gesch\u00e4ftsf\u00fchrer bei der carmasec.\" class=\"u-image__team--medium u-image__transition--default u-image--circle u-index--2\"  \/><img decoding=\"async\" src=\"https:\/\/www.carmasec.com\/wp-content\/uploads\/2026\/03\/Jan-Sudmeyer-e1774897142809-150x150.jpg\" width=\"150\" height=\"150\" srcset=\"\" sizes=\"(max-width: 200px) 100vw, 200px\" alt=\"Portr\u00e4tfoto von Jan Sudmeyer, Gesch\u00e4ftsf\u00fchrer bei der carmasec.\" class=\"u-image__team--medium u-image__transition--hover u-image--circle u-absolute u-pos--top u-pos--left u-index--1\"  \/><\/figure>\n                            <\/div>\n                            <div class=\"o-media__fluid\">\n                                <p class=\"h5 u-mt-x6 u-mb-x0\">Jan Sudmeyer<\/p><p class=\"o-type-small u-mb-x0\">Managing Partner &#038; Trusted Advisior<\/p>\n                            <\/div>\n                        <\/div>\n                    <\/article>\n                    <article class=\"m-team o-grid__col u-6\/12@sm u-4\/12@md u-mb-x4\">\n                        <div class=\"o-media o-media--res o-media--middle c-card o-media---x0 u-block u-text-center o-type-small u-full--height u-bgcolor-gray-blue u-ph-x6 u-pv-x6 u-pv-x12@md\">\n                            <div class=\"o-media__fixed\">\n                                <figure class=\"u-image__transition u-inline-block u-relative\"><img decoding=\"async\" src=\"https:\/\/www.carmasec.com\/wp-content\/uploads\/2026\/04\/Readaktion-Profilbild-150x150.jpg\" width=\"150\" height=\"150\" srcset=\"https:\/\/www.carmasec.com\/wp-content\/uploads\/2026\/04\/Readaktion-Profilbild-150x150.jpg 150w, https:\/\/www.carmasec.com\/wp-content\/uploads\/2026\/04\/Readaktion-Profilbild-300x300.jpg 300w, https:\/\/www.carmasec.com\/wp-content\/uploads\/2026\/04\/Readaktion-Profilbild-768x768.jpg 768w, https:\/\/www.carmasec.com\/wp-content\/uploads\/2026\/04\/Readaktion-Profilbild.jpg 1024w\" sizes=\"(max-width: 200px) 100vw, 200px\" alt=\"Illustration eines Wookiee-Maskottchens auf einem goldenen Schutzschild\" class=\"u-image__team--medium u-image__transition--default u-image--circle u-index--2\"  \/><img decoding=\"async\" src=\"https:\/\/www.carmasec.com\/wp-content\/uploads\/2026\/04\/Team-Redaktion-2-150x150.jpg\" width=\"150\" height=\"150\" srcset=\"https:\/\/www.carmasec.com\/wp-content\/uploads\/2026\/04\/Team-Redaktion-2-150x150.jpg 150w, https:\/\/www.carmasec.com\/wp-content\/uploads\/2026\/04\/Team-Redaktion-2-300x300.jpg 300w, https:\/\/www.carmasec.com\/wp-content\/uploads\/2026\/04\/Team-Redaktion-2-768x768.jpg 768w, https:\/\/www.carmasec.com\/wp-content\/uploads\/2026\/04\/Team-Redaktion-2.jpg 1024w\" sizes=\"(max-width: 200px) 100vw, 200px\" alt=\"Illustration mit dem Spruch \u201eMay the Patch be with you\" auf einem goldenen Schutzschild\" class=\"u-image__team--medium u-image__transition--hover u-image--circle u-absolute u-pos--top u-pos--left u-index--1\"  \/><\/figure>\n                            <\/div>\n                            <div class=\"o-media__fluid\">\n                                <p class=\"h5 u-mt-x6 u-mb-x0\">Any questions? We are looking for answers! <\/p><p class=\"o-type-small u-mb-x0\">carmasec Marketing<\/p>\n                            <\/div>\n                        <\/div>\n                    <\/article>\n                    <article class=\"m-team o-grid__col u-6\/12@sm u-4\/12@md u-mb-x4\">\n                        <div class=\"o-media o-media--res o-media--middle c-card o-media---x0 u-block u-text-center o-type-small u-full--height u-bgcolor-gray-blue u-ph-x6 u-pv-x6 u-pv-x12@md\">\n                            <div class=\"o-media__fixed\">\n                                <figure class=\"u-image__transition u-inline-block u-relative\"><img decoding=\"async\" src=\"https:\/\/www.carmasec.com\/wp-content\/uploads\/2026\/04\/Holger-Kuehlwetter-150x150.jpg\" width=\"150\" height=\"150\" srcset=\"https:\/\/www.carmasec.com\/wp-content\/uploads\/2026\/04\/Holger-Kuehlwetter-150x150.jpg 150w, https:\/\/www.carmasec.com\/wp-content\/uploads\/2026\/04\/Holger-Kuehlwetter-300x300.jpg 300w, https:\/\/www.carmasec.com\/wp-content\/uploads\/2026\/04\/Holger-Kuehlwetter-768x768.jpg 768w, https:\/\/www.carmasec.com\/wp-content\/uploads\/2026\/04\/Holger-Kuehlwetter.jpg 1024w\" sizes=\"(max-width: 200px) 100vw, 200px\" alt=\"Portr\u00e4tfoto von Holger K\u00fchlwetter, Senior Security Consultant bei der carmasec\" class=\"u-image__team--medium u-image__transition--default u-image--circle u-index--2\"  \/><img decoding=\"async\" src=\"https:\/\/www.carmasec.com\/wp-content\/uploads\/2026\/04\/Holger-Kuehlwetter_grau-150x150.jpg\" width=\"150\" height=\"150\" srcset=\"https:\/\/www.carmasec.com\/wp-content\/uploads\/2026\/04\/Holger-Kuehlwetter_grau-150x150.jpg 150w, https:\/\/www.carmasec.com\/wp-content\/uploads\/2026\/04\/Holger-Kuehlwetter_grau-300x300.jpg 300w, https:\/\/www.carmasec.com\/wp-content\/uploads\/2026\/04\/Holger-Kuehlwetter_grau-768x768.jpg 768w, https:\/\/www.carmasec.com\/wp-content\/uploads\/2026\/04\/Holger-Kuehlwetter_grau.jpg 1024w\" sizes=\"(max-width: 200px) 100vw, 200px\" alt=\"Schwarzwei\u00dfes Portr\u00e4tfoto von Holger K\u00fchlwetter, Senior Security Consultant bei der carmasec\" class=\"u-image__team--medium u-image__transition--hover u-image--circle u-absolute u-pos--top u-pos--left u-index--1\"  \/><\/figure>\n                            <\/div>\n                            <div class=\"o-media__fluid\">\n                                <p class=\"h5 u-mt-x6 u-mb-x0\">Holger K\u00fchlwetter<\/p><p class=\"o-type-small u-mb-x0\">Senior Security Consultant<\/p>\n                            <\/div>\n                        <\/div>\n                    <\/article>\n            <\/div>\n        <\/div>\n    <\/section>","protected":false},"excerpt":{"rendered":"<p>Cyber Resilience Act Guide: How your company meets EU requirements for digital products. A guide for all who are responsible for and must justify cybersecurity.<\/p>\n","protected":false},"author":11,"featured_media":4072,"parent":0,"menu_order":0,"template":"","meta":{"_acf_changed":true},"content-type":[20],"industry":[38,35,40,39],"persona":[27,30,29,26,28],"topic":[17,11,16],"class_list":["post-4068","knowledge-center","type-knowledge-center","status-publish","has-post-thumbnail","hentry","content-type-whitepaper","industry-logistics-transportation","industry-manufacturing-industry","industry-other-industries","industry-retail-e-commerce","persona-ciso-security-leadership","persona-compliance-legal-privacy","persona-dev-devops-engineering","persona-executive-management","persona-it-operations-infrastructure","topic-governance-audit-management","topic-information-security-compliance","topic-risk-crisis-management"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v28.0 (Yoast SEO v28.0) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Cyber Resilience Act Guide | carmasec<\/title>\n<meta name=\"description\" content=\"Free 28-page CRA guide: scope, SBOM obligations, 12-point checklist and implementation roadmap. What the EU requires and which measures count now. For manufacturers of digital products. Download now!\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.carmasec.com\/en\/security-knowledge\/cyber-resilience-act-fundamentals-requirements\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Cyber Resilience Act - Fundamentals &amp; Requirements\" \/>\n<meta property=\"og:description\" content=\"Free 28-page CRA guide: scope, SBOM obligations, 12-point checklist and implementation roadmap. What the EU requires and which measures count now. For manufacturers of digital products. Download now!\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.carmasec.com\/en\/security-knowledge\/cyber-resilience-act-fundamentals-requirements\/\" \/>\n<meta property=\"og:site_name\" content=\"carmasec\" \/>\n<meta property=\"article:modified_time\" content=\"2026-07-23T12:04:20+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.carmasec.com\/wp-content\/uploads\/2026\/07\/CRA_Bild_Download-3.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1366\" \/>\n\t<meta property=\"og:image:height\" content=\"768\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.carmasec.com\\\/en\\\/security-knowledge\\\/cyber-resilience-act-fundamentals-requirements\\\/\",\"url\":\"https:\\\/\\\/www.carmasec.com\\\/en\\\/security-knowledge\\\/cyber-resilience-act-fundamentals-requirements\\\/\",\"name\":\"Cyber Resilience Act Guide | carmasec\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.carmasec.com\\\/en\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.carmasec.com\\\/en\\\/security-knowledge\\\/cyber-resilience-act-fundamentals-requirements\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.carmasec.com\\\/en\\\/security-knowledge\\\/cyber-resilience-act-fundamentals-requirements\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.carmasec.com\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/CRA_Bild_Download-3.jpg\",\"datePublished\":\"2026-07-17T11:21:16+00:00\",\"dateModified\":\"2026-07-23T12:04:20+00:00\",\"description\":\"Free 28-page CRA guide: scope, SBOM obligations, 12-point checklist and implementation roadmap. What the EU requires and which measures count now. For manufacturers of digital products. Download now!\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.carmasec.com\\\/en\\\/security-knowledge\\\/cyber-resilience-act-fundamentals-requirements\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.carmasec.com\\\/en\\\/security-knowledge\\\/cyber-resilience-act-fundamentals-requirements\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.carmasec.com\\\/en\\\/security-knowledge\\\/cyber-resilience-act-fundamentals-requirements\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.carmasec.com\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/CRA_Bild_Download-3.jpg\",\"contentUrl\":\"https:\\\/\\\/www.carmasec.com\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/CRA_Bild_Download-3.jpg\",\"width\":1366,\"height\":768,\"caption\":\"Cyber Resilience Act whitepaper shown as a cover and open brochure, featuring a dark blue and orange technology-inspired design.\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.carmasec.com\\\/en\\\/security-knowledge\\\/cyber-resilience-act-fundamentals-requirements\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Startseite\",\"item\":\"https:\\\/\\\/www.carmasec.com\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Cyber Resilience Act &#8211; Fundamentals &#038; Requirements\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.carmasec.com\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/www.carmasec.com\\\/en\\\/\",\"name\":\"carmasec\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.carmasec.com\\\/en\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.carmasec.com\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":[\"Organization\",\"Place\"],\"@id\":\"https:\\\/\\\/www.carmasec.com\\\/en\\\/#organization\",\"name\":\"carmasec GmbH & Co. KG\",\"alternateName\":\"carmasec\",\"url\":\"https:\\\/\\\/www.carmasec.com\\\/en\\\/\",\"logo\":{\"@id\":\"https:\\\/\\\/www.carmasec.com\\\/en\\\/security-knowledge\\\/cyber-resilience-act-fundamentals-requirements\\\/#local-main-organization-logo\"},\"image\":{\"@id\":\"https:\\\/\\\/www.carmasec.com\\\/en\\\/security-knowledge\\\/cyber-resilience-act-fundamentals-requirements\\\/#local-main-organization-logo\"},\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/company\\\/carmasec\\\/\"],\"description\":\"Die carmasec GmbH & Co. KG ist eine auf Cybersicherheit und Cyberresilienz spezialisierte Beratungsunternehmen mit Sitz in Essen. Das Leistungsspektrum verbindet zwei essenzielle Welten: strategische Compliance und dem Schutz vor Cyberangriffen. Mit einem klaren Fokus auf agile Sicherheitsprozesse unterst\u00fctzt carmasec Kunden branchenneutral und herstellerunabh\u00e4ngig. Das interdisziplin\u00e4re Team integriert langj\u00e4hrige Beratungserfahrung mit modernen Arbeitsweisen, um komplexe Anforderungen \u2013 von ISMS und Risikomanagement bis hin zu Cloud Security und Offensive Security \u2013 effizient umzusetzen. Zu den Kunden z\u00e4hlen der gehobene Mittelstand sowie internationale Konzerne, insbesondere aus Finanz- und Versicherungswesen, Fertigungsindustrie, Automotive sowie Kritischen Infrastrukturen. Mit der etablierten Veranstaltungsreihe \u201efriends of carmasec\\\" schafft das Unternehmen eine zentrale Plattform f\u00fcr den Branchen-Dialog und vernetzt regelm\u00e4\u00dfig Entscheidungstr\u00e4ger:innen und Expert:innen aus der Security-Community. carmasec bef\u00e4higt Organisationen, Risiken ganzheitlich zu managen und digitale Infrastrukturen proaktiv zu sch\u00fctzen.\",\"legalName\":\"carmasec GmbH & Co. KG\",\"foundingDate\":\"2018-12-18\",\"numberOfEmployees\":{\"@type\":\"QuantitativeValue\",\"minValue\":\"11\",\"maxValue\":\"50\"},\"telephone\":[],\"openingHoursSpecification\":[{\"@type\":\"OpeningHoursSpecification\",\"dayOfWeek\":[\"Monday\",\"Tuesday\",\"Wednesday\",\"Thursday\",\"Friday\",\"Saturday\",\"Sunday\"],\"opens\":\"09:00\",\"closes\":\"17:00\"}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.carmasec.com\\\/en\\\/security-knowledge\\\/cyber-resilience-act-fundamentals-requirements\\\/#local-main-organization-logo\",\"url\":\"https:\\\/\\\/www.carmasec.com\\\/wp-content\\\/uploads\\\/2026\\\/02\\\/logo-carmasec.svg\",\"contentUrl\":\"https:\\\/\\\/www.carmasec.com\\\/wp-content\\\/uploads\\\/2026\\\/02\\\/logo-carmasec.svg\",\"width\":299,\"height\":40,\"caption\":\"carmasec GmbH & Co. KG\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Cyber Resilience Act Guide | carmasec","description":"Free 28-page CRA guide: scope, SBOM obligations, 12-point checklist and implementation roadmap. What the EU requires and which measures count now. For manufacturers of digital products. Download now!","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.carmasec.com\/en\/security-knowledge\/cyber-resilience-act-fundamentals-requirements\/","og_locale":"en_US","og_type":"article","og_title":"Cyber Resilience Act - Fundamentals & Requirements","og_description":"Free 28-page CRA guide: scope, SBOM obligations, 12-point checklist and implementation roadmap. What the EU requires and which measures count now. For manufacturers of digital products. Download now!","og_url":"https:\/\/www.carmasec.com\/en\/security-knowledge\/cyber-resilience-act-fundamentals-requirements\/","og_site_name":"carmasec","article_modified_time":"2026-07-23T12:04:20+00:00","og_image":[{"width":1366,"height":768,"url":"https:\/\/www.carmasec.com\/wp-content\/uploads\/2026\/07\/CRA_Bild_Download-3.jpg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.carmasec.com\/en\/security-knowledge\/cyber-resilience-act-fundamentals-requirements\/","url":"https:\/\/www.carmasec.com\/en\/security-knowledge\/cyber-resilience-act-fundamentals-requirements\/","name":"Cyber Resilience Act Guide | carmasec","isPartOf":{"@id":"https:\/\/www.carmasec.com\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.carmasec.com\/en\/security-knowledge\/cyber-resilience-act-fundamentals-requirements\/#primaryimage"},"image":{"@id":"https:\/\/www.carmasec.com\/en\/security-knowledge\/cyber-resilience-act-fundamentals-requirements\/#primaryimage"},"thumbnailUrl":"https:\/\/www.carmasec.com\/wp-content\/uploads\/2026\/07\/CRA_Bild_Download-3.jpg","datePublished":"2026-07-17T11:21:16+00:00","dateModified":"2026-07-23T12:04:20+00:00","description":"Free 28-page CRA guide: scope, SBOM obligations, 12-point checklist and implementation roadmap. What the EU requires and which measures count now. For manufacturers of digital products. Download now!","breadcrumb":{"@id":"https:\/\/www.carmasec.com\/en\/security-knowledge\/cyber-resilience-act-fundamentals-requirements\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.carmasec.com\/en\/security-knowledge\/cyber-resilience-act-fundamentals-requirements\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.carmasec.com\/en\/security-knowledge\/cyber-resilience-act-fundamentals-requirements\/#primaryimage","url":"https:\/\/www.carmasec.com\/wp-content\/uploads\/2026\/07\/CRA_Bild_Download-3.jpg","contentUrl":"https:\/\/www.carmasec.com\/wp-content\/uploads\/2026\/07\/CRA_Bild_Download-3.jpg","width":1366,"height":768,"caption":"Cyber Resilience Act whitepaper shown as a cover and open brochure, featuring a dark blue and orange technology-inspired design."},{"@type":"BreadcrumbList","@id":"https:\/\/www.carmasec.com\/en\/security-knowledge\/cyber-resilience-act-fundamentals-requirements\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Startseite","item":"https:\/\/www.carmasec.com\/en\/"},{"@type":"ListItem","position":2,"name":"Cyber Resilience Act &#8211; Fundamentals &#038; Requirements"}]},{"@type":"WebSite","@id":"https:\/\/www.carmasec.com\/en\/#website","url":"https:\/\/www.carmasec.com\/en\/","name":"carmasec","description":"","publisher":{"@id":"https:\/\/www.carmasec.com\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.carmasec.com\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":["Organization","Place"],"@id":"https:\/\/www.carmasec.com\/en\/#organization","name":"carmasec GmbH & Co. KG","alternateName":"carmasec","url":"https:\/\/www.carmasec.com\/en\/","logo":{"@id":"https:\/\/www.carmasec.com\/en\/security-knowledge\/cyber-resilience-act-fundamentals-requirements\/#local-main-organization-logo"},"image":{"@id":"https:\/\/www.carmasec.com\/en\/security-knowledge\/cyber-resilience-act-fundamentals-requirements\/#local-main-organization-logo"},"sameAs":["https:\/\/www.linkedin.com\/company\/carmasec\/"],"description":"Die carmasec GmbH & Co. KG ist eine auf Cybersicherheit und Cyberresilienz spezialisierte Beratungsunternehmen mit Sitz in Essen. Das Leistungsspektrum verbindet zwei essenzielle Welten: strategische Compliance und dem Schutz vor Cyberangriffen. Mit einem klaren Fokus auf agile Sicherheitsprozesse unterst\u00fctzt carmasec Kunden branchenneutral und herstellerunabh\u00e4ngig. Das interdisziplin\u00e4re Team integriert langj\u00e4hrige Beratungserfahrung mit modernen Arbeitsweisen, um komplexe Anforderungen \u2013 von ISMS und Risikomanagement bis hin zu Cloud Security und Offensive Security \u2013 effizient umzusetzen. Zu den Kunden z\u00e4hlen der gehobene Mittelstand sowie internationale Konzerne, insbesondere aus Finanz- und Versicherungswesen, Fertigungsindustrie, Automotive sowie Kritischen Infrastrukturen. Mit der etablierten Veranstaltungsreihe \u201efriends of carmasec\" schafft das Unternehmen eine zentrale Plattform f\u00fcr den Branchen-Dialog und vernetzt regelm\u00e4\u00dfig Entscheidungstr\u00e4ger:innen und Expert:innen aus der Security-Community. carmasec bef\u00e4higt Organisationen, Risiken ganzheitlich zu managen und digitale Infrastrukturen proaktiv zu sch\u00fctzen.","legalName":"carmasec GmbH & Co. KG","foundingDate":"2018-12-18","numberOfEmployees":{"@type":"QuantitativeValue","minValue":"11","maxValue":"50"},"telephone":[],"openingHoursSpecification":[{"@type":"OpeningHoursSpecification","dayOfWeek":["Monday","Tuesday","Wednesday","Thursday","Friday","Saturday","Sunday"],"opens":"09:00","closes":"17:00"}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.carmasec.com\/en\/security-knowledge\/cyber-resilience-act-fundamentals-requirements\/#local-main-organization-logo","url":"https:\/\/www.carmasec.com\/wp-content\/uploads\/2026\/02\/logo-carmasec.svg","contentUrl":"https:\/\/www.carmasec.com\/wp-content\/uploads\/2026\/02\/logo-carmasec.svg","width":299,"height":40,"caption":"carmasec GmbH & Co. KG"}]}},"_links":{"self":[{"href":"https:\/\/www.carmasec.com\/en\/wp-json\/wp\/v2\/knowledge-center\/4068","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.carmasec.com\/en\/wp-json\/wp\/v2\/knowledge-center"}],"about":[{"href":"https:\/\/www.carmasec.com\/en\/wp-json\/wp\/v2\/types\/knowledge-center"}],"author":[{"embeddable":true,"href":"https:\/\/www.carmasec.com\/en\/wp-json\/wp\/v2\/users\/11"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.carmasec.com\/en\/wp-json\/wp\/v2\/media\/4072"}],"wp:attachment":[{"href":"https:\/\/www.carmasec.com\/en\/wp-json\/wp\/v2\/media?parent=4068"}],"wp:term":[{"taxonomy":"content-type","embeddable":true,"href":"https:\/\/www.carmasec.com\/en\/wp-json\/wp\/v2\/content-type?post=4068"},{"taxonomy":"industry","embeddable":true,"href":"https:\/\/www.carmasec.com\/en\/wp-json\/wp\/v2\/industry?post=4068"},{"taxonomy":"persona","embeddable":true,"href":"https:\/\/www.carmasec.com\/en\/wp-json\/wp\/v2\/persona?post=4068"},{"taxonomy":"topic","embeddable":true,"href":"https:\/\/www.carmasec.com\/en\/wp-json\/wp\/v2\/topic?post=4068"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}