Services
Prepare your product organisation for CRA requirements.
Understand what preparation may be needed across product security, lifecycle processes and supporting documentation. We help turn identified CRA readiness needs into a practical programme of work.
What we help you do.
- Establish the relevant product and organisational scope.
- Review lifecycle security practices.
- Identify documentation and evidence gaps.
- Review vulnerability-handling responsibilities.
- Prioritise improvement activities.
Typical outputs.
Readiness findings, a responsibility map, evidence plan and improvement roadmap.
Typical outputs describe potential engagement deliverables. Actual deliverables depend on the scope agreed for each engagement.
What to discuss when scoping the work
- Which products and economic-operator roles need to be considered?
- What is already known about applicability and product classification?
- Which lifecycle, support and vulnerability-handling records are available?
Illustrative engagement
A manufacturer has development records and support procedures in different teams. Preparation can identify missing links between product scope, security practices, vulnerability handling and the documentation needed for the next review.
How the engagement can proceed
- Clarify product scope and unresolved applicability questions.
- Review lifecycle practices and the supporting evidence.
- Assign preparation actions and documentation responsibilities.