GUIDES
Reference guides for CRA readiness and system safety.
Working references on the Cyber Resilience Act and the safety and security standards it sits alongside, written for engineers and programme owners who need the substance rather than a summary.
- CRAWhat the Cyber Resilience Act requires of manufacturersThe CRA is not a single checklist; it is a set of interlocking obligations that touch design, documentation, operations and the supply chain.
- CRACRA timeline and deadlinesThree dates matter in practice; everything else is detail that hangs off them.
- CRAConformity assessment routes under the CRAConformity assessment is not a single procedure; the route depends entirely on how a product is classified.
- CRACRA technical documentationTechnical documentation is the artefact reviewers actually read; its structure determines whether an assessment is fast or slow.
- CRASBOM and coordinated vulnerability handlingAn SBOM is only useful if it can answer a question quickly; a vulnerability handling process is only credible if it has been exercised.
- Functional safetyISO 26262 functional safetyISO 26262 succeeds or fails on whether ASIL decomposition and traceability hold together end to end, not on whether a document set exists.
- Functional safetyIEC 61508 functional safety basicsIEC 61508 is the root standard most industry-specific functional safety rules trace back to, and understanding it clarifies why derivatives look the way they do.
- Product securityIEC 62443 product securityIEC 62443 is a family of standards addressing different roles in the industrial automation supply chain, and confusing the roles is the most common source of misapplied requirements.
- Product securityISO/SAE 21434 automotive cybersecurityISO/SAE 21434 mirrors the functional safety lifecycle in structure, which is deliberate and makes coordinating the two disciplines tractable rather than duplicative.
- System safetySafety cases and evidence chainsA safety case is an argument, not a folder of documents; the argument is only as strong as its weakest link.