Cyber Resilience Act Readiness Assessment

Start your journey towards Cyber Resilience Act compliance today

What can I expect?

This service package helps your organization understand, review, and prepare for Cyber Resilience Act compliance in the context of your Connected Products. After starting with a holistic introduction into the topic, our CRA security experts will support in evaluating your current architecture, identifying gaps and implementing a CRA-compliant solution that aligns with your product roadmap as well as current IT infrastructure and processes.

The engagement can be conducted either fully remote or partially remote and onsite based on a fixed price contract.

How does it work?

To ensure a smooth and logical procedure, Cumulocity will navigate through the following phases:

1. CRA Discovery Session - Knowledge Refresh (pre-work available to optimize time required)

  • Introduction to CRA regulation, including compliance timelines, requirements and functional areas of interest.
  • Review of a CRA functional reference architecture.
  • Review and co-development of a CRA readiness checklist.

2. CRA Gap Analysis Workshop - Group Deep Dive

  • Customer presents the scope of IoT device fleet and existing capabilities.
  • Clarification of CRA requirements in the context of customer operations.
  • Joint development of a Gap Analysis hypothesis.
  • Prioritization of risks and hypotheses of the mitigation scope.
  • Draft customization of desired “CRA compliant” architecture.

3. Report of Findings - Assessment Completion

  • Final Gap Analysis, Risk & Mitigation recommendations.
  • Final proposal - Customized Enterprise Architecture for CRA compliance.
  • Proposed Short, Medium and Long-term action plan.
  • Final Q&A and Next Steps.

What will I gain?

  • Clarity: Turn regulatory CRA complexity into a structured action plan.
  • Confidence: Know where you stand and what’s required for CRA compliance.
  • Speed: Achieve this in a focused series of interactive sessions with minimal disruption.

Who should participate?

  • CISO
  • Security Architect
  • Solution Architect
  • Compliance / Risk Officer
  • Product Owner IoT
  • System Administrator/Operator
  • Operations / Engineering Lead

What results can I expect from this offer?

  • Foundational CRA Knowledge: Clear understanding of the regulation, timelines, and implications.
  • Customized Reference Architecture: Future-proof design aligned with CRA requirements.
  • Prioritized CRA Strategy: Actionable roadmap with short-, medium-, and long-term steps.
  • Stakeholder Alignment: Informed, engaged, and prepared team members across roles.
  • Expert Guidance: Access to Cumulocity specialists for tailored recommendations and clarification.