Events

The Cyber Resilience Act (CRA) will introduce mandatory cybersecurity requirements for products with digital elements placed on the EU market. For many SMEs, the challenge is not understanding that the CRA applies, but how to comply in practice, which standards to follow, and which tools, guidance, and funding opportunities are available to support compliance. 

This workshop helps SMEs understand, prepare for, and comply with the EU Cyber Resilience Act (CRA), translating regulatory requirements into practical guidance and tools and providing information about the ongoing standardisation process and ways to engage in open consultations, a series of workshops is organised throughout Europe.

Following a Standardisation Request from the European Commission in support of the implementation of the Cyber Resilience Act (CRA), the European Standardization Organizations (ESOs) - ETSI and CEN-CENELEC - are actively developing harmonised standards in their relevant technical groups During the session, the rapporteurs of these standards in the ESOs technical groups will present some of the latest drafts under development and engage with the audience to discuss the ongoing work, answer questions, and gather feedback to refine the drafts.

The Cyber Resilience Act (CRA) will introduce mandatory cybersecurity requirements for products with digital elements placed on the EU market. For many SMEs, the challenge is not understanding that the CRA applies, but how to comply in practice, which standards to follow, and which tools, guidance, and funding opportunities are available to support compliance. 

This workshop helps SMEs understand, prepare for, and comply with the EU Cyber Resilience Act (CRA), translating regulatory requirements into practical guidance and tools and providing information about the ongoing standardisation process and ways to engage in open consultations, a series of workshops is organised throughout Europe.

Following a Standardisation Request from the European Commission in support of the implementation of the Cyber Resilience Act (CRA), the European Standardization Organizations (ESOs) - ETSI and CEN-CENELEC - are actively developing harmonised standards in their relevant technical groups During the session, the rapporteurs of these standards in the ESOs technical groups will present some of the latest drafts under development and engage with the audience to discuss the ongoing work, answer questions, and gather feedback to refine the drafts.

Hosted at the Ministry of Economic Affairs and Climate, the event is organised by the EU-funded projects CYBERSTAND.eu and STAN4CRA.eu, the workshops bring together key EU-funded experts and projects working on the design of SME-friendly standards and CRA compliance tools.

The Cyber Resilience Act (CRA) will introduce mandatory cybersecurity requirements for products with digital elements placed on the EU market. For many SMEs, the challenge is not understanding that the CRA applies, but how to comply in practice, which standards to follow, and which tools, guidance, and funding opportunities are available to support compliance. 

This workshop helps SMEs understand, prepare for, and comply with the EU Cyber Resilience Act (CRA), translating regulatory requirements into practical guidance and tools and providing information about the ongoing standardisation process and ways to engage in open consultations, a series of workshops is organised throughout Europe.

Following a Standardisation Request from the European Commission in support of the implementation of the Cyber Resilience Act (CRA), the European Standardization Organizations (ESOs) - ETSI and CEN-CENELEC - are actively developing harmonised standards in their relevant technical groups During the session, the rapporteurs of these standards in the ESOs technical groups will present some of the latest drafts under development and engage with the audience to discuss the ongoing work, answer questions, and gather feedback to refine the drafts.

The Cyber Resilience Act (CRA) introduces new cybersecurity requirements for products with digital elements placed on the European market. While these obligations will improve the security and resilience of digital products, many SMEs are still assessing how to prepare for compliance and which tools, standards and resources can support their implementation journey.

This webinar, organised by EIT Manufacturing and the MANTRA project, in collaboration with Cyberstand.eu, will provide manufacturing SMEs with a practical introduction to the CRA, the standards supporting compliance, and the resources currently being developed across European initiatives. Participants will gain insights into key compliance requirements, learn about relevant CRA compliance tools, and explore manufacturing-focused use cases demonstrating how these solutions can help organisations strengthen their cybersecurity posture and prepare for future regulatory obligations.

The Cyber Resilience Act (CRA) will introduce mandatory cybersecurity requirements for products with digital elements placed on the EU market. For many SMEs, the challenge is not understanding that the CRA applies, but how to comply in practice, which standards to follow, and which tools, guidance, and funding opportunities are available to support compliance. 

This workshop helps SMEs understand, prepare for, and comply with the EU Cyber Resilience Act (CRA), translating regulatory requirements into practical guidance and tools and providing information about the ongoing standardisation process and ways to engage in open consultations, a series of workshops is organised throughout Europe.

Following a Standardisation Request from the European Commission in support of the implementation of the Cyber Resilience Act (CRA), the European Standardization Organizations (ESOs) - ETSI and CEN-CENELEC - are actively developing harmonised standards in their relevant technical groups During the session, the rapporteurs of these standards in the ESOs technical groups will present some of the latest drafts under development and engage with the audience to discuss the ongoing work, answer questions, and gather feedback to refine the drafts.

The Cyber Resilience Act (CRA) will introduce mandatory cybersecurity requirements for products with digital elements placed on the EU market. For many SMEs, the challenge is not understanding that the CRA applies, but how to comply in practice, which standards to follow, and which tools, guidance, and funding opportunities are available to support compliance. 

This workshop helps SMEs understand, prepare for, and comply with the EU Cyber Resilience Act (CRA), translating regulatory requirements into practical guidance and tools and providing information about the ongoing standardisation process and ways to engage in open consultations, a series of workshops is organised throughout Europe.

Following a Standardisation Request from the European Commission in support of the implementation of the Cyber Resilience Act (CRA), the European Standardization Organizations (ESOs) - ETSI and CEN-CENELEC - are actively developing harmonised standards in their relevant technical groups During the session, the rapporteurs of these standards in the ESOs technical groups will present some of the latest drafts under development and engage with the audience to discuss the ongoing work, answer questions, and gather feedback to refine the drafts.

This deep dive session provides a comprehensive overview of the technical component requirements for ACS in line with EN IEC 62443-4-2: prAA. It explores how OT vertical harmonised standards interact with EN IEC 62443-4-1 and 62443-4-2, with a focus on selecting relevant cybersecurity requirements and assessment techniques tailored to specific product verticals.

The session will also guide manufacturers through the applicability process, including how to apply mandatory requirements and identify any additional measures needed to achieve presumption of conformity for their products.

Join us for an in-depth discussion designed to support alignment and clarity on these critical requirements.

Speaker: Srinath Pydi Narayana Rao

Target Audience:

SMEs, Open-Source Communities, Manufacturers of products with digital elements, market surveillance authorities, Academia, Consumer Associations, Cybersecurity experts.

This webinar introduces the technical component requirements for ACS based on EN IEC 62443-4-2: prAA. It highlights the relationship between OT vertical harmonised standards and EN IEC 62443-4-1 and 62443-4-2, focusing on how to determine applicable cybersecurity requirements and assessment approaches for specific product verticals.

Participants will gain practical insights into the applicability process, including how to address mandatory requirements and identify additional elements necessary to support presumption of conformity. Attend this session to build a clear understanding of compliance expectations and implementation considerations.

Speaker: Srinath Pydi Narayana Rao

This workshop helps SMEs understand, prepare for, and comply with the EU Cyber Resilience Act (CRA), translating regulatory requirements into practical guidance and tools and providing information about the ongoing standardisation process and ways to engage in open consultations,

The Cyber Resilience Act (CRA) will introduce mandatory cybersecurity requirements for products with digital elements placed on the EU market. For many SMEs, the challenge is not understanding that the CRA applies, but how to comply in practice, which standards to follow, and which tools, guidance, and funding opportunities are available to support compliance. 

This workshop helps SMEs understand, prepare for, and comply with the EU Cyber Resilience Act (CRA), translating regulatory requirements into practical guidance and tools and providing information about the ongoing standardisation process and ways to engage in open consultations, a series of workshops are organised throughout Europe.

Following a Standardisation Request from the European Commission in support of the implementation of the Cyber Resilience Act (CRA), the European Standardization Organizations (ESOs) - ETSI and CEN-CENELEC - are actively developing harmonised standards in their relevant technical groups During the session, the rapporteurs of these standards in the ESOs technical groups will present some of the latest drafts under development and engage with the audience to discuss the ongoing work, answer questions, and gather feedback to refine the drafts.

This workshop helps SMEs understand, prepare for, and comply with the EU Cyber Resilience Act (CRA), translating regulatory requirements into practical guidance and tools and providing information about the ongoing standardisation process and ways to engage in open consultations, a series of workshops are organised throughout Europe.

Following a Standardisation Request from the European Commission in support of the implementation of the Cyber Resilience Act (CRA), the European Standardization Organizations (ESOs) - ETSI and CEN-CENELEC - are actively developing harmonised standards in their relevant technical groups. During the session, the rapporteurs of these standards in the ESOs technical groups will present some of the latest drafts under development and engage with the audience to discuss the ongoing work, answer questions, and gather feedback to refine the drafts.

Hosted at AFNOR, 11 rue Francis de Pressensé – 93571 La Plaine St-Denis Cedex, the event is organised by the EU-funded projects CYBERSTAND.eu and STAN4CRA.eu, the workshops bring together key EU-funded experts and projects working on the design of SME-friendly standards and CRA compliance tools.   

Why join

• Understand what the CRA requires and its implications for SMEs.
• Learn which standards matter and how they support compliance.
• Presentations from CRA standards rapporteurs on ongoing standardisation work.
• Discover compliance tools, practical guides, and funding available through CRA-related EU-funded projects.
• Gain practical insights tailored to SME on how CRA requirements translate into product development and conformity processes.
• 
  

Attendance is free but registration is required at this link: CRA Standards Unlocked - EU Tour in Paris | Cyberstand

The Cyber Resilience Act (CRA) will introduce mandatory cybersecurity requirements for products with digital elements placed on the EU market. For many SMEs, the challenge is not understanding that the CRA applies, but how to comply in practice, which standards to follow, and which tools, guidance, and funding opportunities are available to support compliance. 

CRA Standards Unlocked - EU Tour in Barcelona | Cyberstand

This exclusive deep-dive session continues the conversation started in the introductory webinar and takes it to the next level.

This exclusive deep-dive session continues the conversation started in the introductory webinar (25 February 2026) and takes it to the next level. In this interactive 4-hour workshop, participants will work directly with the experts behind the standard to explore its structure, scope, and key technical elements in depth. It’s a unique opportunity to ask questions, exchange insights with peers, and actively contribute stakeholder feedback that will help shape a harmonized standard supporting CRA compliance.

This Deep Dive Session focuses on EN 40000-1-4: Security Controls – Generic Security Requirements, a key horizontal standard supporting compliance with the essential product requirements of the Cyber Resilience Act (CRA).

This exclusive deep-dive session continues the conversation started in the introductory webinar (23 February 2026) and takes it to the next level.

Webinar ‘CRA Standards Unlocked: Cybersecurity requirements for identity management systems and privileged access management software and hardware, including authentication and access control readers, including biometric readers’

The Cyber Resilience Act (CRA) will introduce mandatory cybersecurity requirements for products with digital elements placed on the EU market.

CRA Standards Unlocked - EU Tour in Turin | Cyberstand

With the EU Cyber Resilience Act (CRA) now entering into force, the European regulatory landscape is rapidly evolving to strengthen the cybersecurity of products with digital elements. To support this transition, CEN-CLC/JTC 13 WG 6 is leading the development of a harmonized standard addressing th

You can join the conversation by reading the draft and submitting your comments entering the ETSI Open Area  or the ETSI Labs. We look forward to receive your inputs and feedback!

• As work on the Vertical Standards for the EU’s Cyber Resilience Act (CRA) moves forward, ETSI warmly invites you to join an exclusive deep dive into the ongoing development of the European harmonized standard for Consumer IoT Products.

You can join the conversation by reading the draft and submitting your comments entering the ETSI Open Area  or the ETSI Labs. We look forward to receive your inputs and feedback!

As work on the Vertical Standards for the EU’s Cyber Resilience Act (CRA) moves forward, ETSI warmly invites you to join an exclusive deep dive into the ongoing development of the European harmonized standard for Browsers.

You can join the conversation by reading the draft and submitting your comments entering the ETSI Open Area  or the ETSI Labs. We look forward to receive your inputs and feedback!

As work on the Vertical Standards for the EU’s Cyber Resilience Act (CRA) moves forward, ETSI warmly invites you to join an exclusive deep dive into the ongoing development of the European harmonized standard for Physical and Virtual Network Interfaces.

You can join the conversation by reading the draft and submitting your comments entering the ETSI Open Area  or the ETSI Labs. We look forward to receive your inputs and feedback!

As work on the Vertical Standards for the EU’s Cyber Resilience Act (CRA) moves forward, ETSI warmly invites you to join an exclusive deep dive into the ongoing development of the European harmonized standard for Physical and Virtual Network Interfaces.

You can join the conversation by reading the draft and submitting your comments entering the ETSI Open Area  or the ETSI Labs. We look forward to receive your inputs and feedback!

As a follow-up to the webinar “CRA Standards Unlocked: Cybersecurity Requirements for Hardware Devices with Security Boxes”, we invite you to join an exclusive deep dive into the ongoing development of the European harmonized standard for Hardware Devices with Security Boxes.

As work on the Vertical Standards for the EU’s Cyber Resilience Act (CRA) moves forward, ETSI warmly invites you to join an exclusive deep dive into the ongoing development of the European harmonized standard for Antivirus.

You can join the conversation by reading the draft and submitting your comments entering the ETSI Open Area  or the ETSI Labs. We look forward to receive your inputs and feedback!

As work on the Vertical Standards for the EU’s Cyber Resilience Act (CRA) moves forward, ETSI warmly invites you to join an exclusive deep dive into the ongoing development of the European harmonized standard for Physical and Virtual Network Interfaces.

You can join the conversation by reading the draft and submitting your comments entering the ETSI Open Area  or the ETSI Labs. We look forward to receive your inputs and feedback!

As work on the Vertical Standards for the EU’s Cyber Resilience Act (CRA) moves forward, ETSI warmly invites you to join an exclusive deep dive into the ongoing development of the European harmonized standard for Network Management Systems (NMS).

You can join the conversation by reading the draft and submitting your comments entering the ETSI Open Area  or the ETSI Labs . We look forward to receive your inputs and feedback!

The Cyber Resilience Act (CRA) will introduce mandatory cybersecurity requirements for products with digital elements placed on the EU market.

CRA Standards Unlocked - EU Tour in Zagreb | Cyberstand

As work on the Vertical Standards for the EU’s Cyber Resilience Act (CRA) moves forward, ETSI warmly invites you to join an exclusive deep dive into the ongoing development of the European harmonized standard for Boot Managers.

You can join the conversation by reading the draft and submitting your comments entering the ETSI Open Area  or the ETSI Labs . We look forward to receive your inputs and feedback!

As work on the Vertical Standards for the EU’s Cyber Resilience Act (CRA) moves forward, ETSI warmly invites you to join an exclusive deep dive into the ongoing development of the European harmonized standard for Password Managers.

You can join the conversation by reading the draft and submitting your comments entering the ETSI Open Area  or the ETSI Labs . We look forward to receive your inputs and feedback!

As work on the Vertical Standards for the EU’s Cyber Resilience Act (CRA) moves forward, ETSI warmly invites you to join an exclusive deep dive into the ongoing development of the European harmonized standard for VPNs.

You can join the conversation by reading the draft and submitting your comments entering the ETSI Open Area  or the ETSI Labs . We look forward to receive your inputs and feedback!

As work on the Vertical Standards for the EU’s Cyber Resilience Act (CRA) moves forward, ETSI warmly invites you to join an exclusive deep dive into the ongoing development of the European harmonized standard for PKI and digital certificate issuance software.

You can join the conversation by reading the draft and submitting your comments entering the ETSI Open Area  or the ETSI Labs . We look forward to receive your inputs and feedback!

Join us to gain a comprehensive understanding of how this standard is evolving, what it means for your organization, and how they will help meet CRA compliance through practical, aligned, and technically robust harmonized standards.

As work on the Vertical Standards for the EU’s Cyber Resilience Act (CRA) moves forward, ETSI warmly invites you to join an exclusive deep dive into the ongoing development of the European harmonized standard for Firewalls.

You can join the conversation by reading the draft and submitting your comments entering the ETSI Open Area  or the ETSI Labs . We look forward to receive your inputs and feedback!

As work on the Vertical Standards for the EU’s Cyber Resilience Act (CRA) moves forward, ETSI warmly invites you to join an exclusive deep dive into the ongoing development of the European harmonized standard for Routers, Modems and Switches.

You can join the conversation by reading the draft and submitting your comments entering the ETSI Open Area  or the ETSI Labs . We look forward to receive your inputs and feedback!

As work on the Vertical Standards for the EU’s Cyber Resilience Act (CRA) moves forward, ETSI warmly invites you to join an exclusive deep dive into the ongoing development of the European harmonized standard for Hypervisors and container runtime systems.

You can join the conversation by reading the draft and submitting your comments entering the ETSI Open Area  or the ETSI Labs . We look forward to receive your inputs and feedback!

As a follow-up to “CRA Standards Unlocked: Navigating smartcards, similar devices & secure element compliance under the Cyber Resilience Act”, we invite you to join an exclusive deep dive into the ongoing development of the European harmonized standard for the application layer of smartcards, secure elements, and related devices.

Led by the project’s rapporteur and featuring expert contributions from members of the Technical Committee, this session will go beyond the high-level overview to explore the details of the current draft standard. Participants will gain:

• First-hand insights into the technical approach guiding the standard’s design
• A clearer understanding of how compliance criteria are being shaped to meet the essential requirements of the Cyber Resilience Act (EU 2024/2847)
• The opportunity to learn directly from the experts driving this work and contribute during an interactive session

Speakers: Experts from the CEN TC 224 WG 17, work item #41b CRA standardization request.

More information is on the STAN4CRA website.

We hereby share with you the link to the GitHub for providing further feedback on the presentation: STAN4CRA / EN 4000X Smart card applications of secure elements · GitLab

Deadline for comments is 3 November 2025 COB.

Note: The questions and answers compiled in the Q&A report were not proof-read by DG CONNECT. The report is presented for reference purposes only, and no review or input from DG CONNECT was sought or provided prior to publication.

The session will explain how harmonised standards are being developed to support compliance for important product categories, outline the role of stakeholders, and provide an update on current progress.

What to expect during the webinar?

•  Understand the CRA: Get a structured overview of the Cyber Resilience Act and its practical implications.
• Learn about the role of standards: See how harmonised standards will support compliance and reduce regulatory uncertainty.
• Stay up to date: Hear the latest developments in the standardisation process and where things currently stand

After the webinar, attendees will be invited to participate in the public consultation on the working drafts of standards defining cybersecurity requirements for different product categories under the CRA, followed by interactive deep-dive sessions, where they can engage directly with experts, provide input, and give feedback on draft standards contributing to the CRA’s implementation.

Learn what’s unfolding. Help shape what comes!

Presenters

A. Leadbeater, ETSI TC CYBER CHAIR , F. Bozzi, ETSI STF 701 Leader

The workshop provided an overview of the Cyber Resilience Act, highlighting the key role of standardization and the way forward but also a comprehensive understanding of how standards can effectively mitigate risks, enhance cybersecurity posture, and ensure that products and services are aligned with the legal expectations set forth by the CRA.​

With the EU Cyber Resilience Act (CRA) entering into force, the European regulatory landscape is shifting rapidly to address the cybersecurity of products with digital elements. To support this transition, CENELEC TC65X WG3 is leading the adaptation of the internationally recognized EN IEC 62443 series into harmonized European standards (hENs) that meet the essential cybersecurity requirements of the CRA.

This webinar will serve as an introduction to PT2 horizontal standards for product security controls and prepare for UNE's workshop 'Cyber Resilience Act and Horizontal Standards' on 23 September, taking place in Madrid and online.

Speakers: Angelo D'Amato, Lucia Lanfri, Yannis Chourmouziadis.

Join us as the lead rapporteur of this initiative takes you inside the development of the European harmonized standard for smartcards, similar devices, and secure elements.

AGENDA:

13:00 –Welcome and Introduction to the workshop

13:10 - Presentation of main elements of the draft standard Vulnerability Handling

13:30 – Deep dive and interactive session:

·       5.1 [PRE] Preparation / Q&A

·       5.2 [RCP] Receipt / Q&A

·       5.3 [VRF] Verification / Q&A

·       5.4 [RMD] Remediation / Q&A

15:15 – Coffee break

15:30 – Continuation deep dive and interactive session:

·       5.5 [RLS] Release / Q&A

·       5.6 [PRP] Post release / Q&A

16:30 - Conclusions and closure

17:00 - End

This year's edition will take place at a strategic moment, the shift from the development of horizontal standards for the Cyber Resilience Act (CRA), which address cross-sectoral cybersecurity requirements applicable to all digital products and services, towards the development of vertical standards, tailored to the specific needs of individual sectors and product categories.

The Cyber Resilience Act (CRA), which is first European legislation about the cyber security of numeric products, aims at protecting consumers and businesses that purchase software or hardware products which contain digital elements. The CRA was enforced in all EU Member States on December 11, 2024,

Semiconductors and trusted chips are concerned by this regulation, hence their compliance to the requirements of the CRA will be demonstrated by the application of a CE marking. Further normative work is underway within the CLC/TC 47X with the intention of mapping the existing standards and developing future European standards on this subject.

Go further !An hybrid deep dive session, organized around the four major theme addressed by the CLC/TC 47X, will be also organized on Tuesday, March 18, 2025 from 9:00 a.m. to 5:00 p.m. at the Comet Meetings Bercy : 40 avenue des Terroirs de France - 75012 Paris.

Schedule:9:00 am to 9:30 am : welcome coffee9:30 am : meeting opening : CRA overview and presentation of CLC/TC 47XTopic 1 « FPGA / ASIC with security related functionalities »Topic 2 « SmartCards and Secure Element Platforms »12:30 pm to 1:45 pm : lunch break1:45 pm : afternoon deep dive sessionTopic…