On 27th July 2026, the European Commission issued for the first time official guidance on how the CRA should be “interpreted and implemented”.
While some of the advice simply confirms what should be evident from the regulation, there is valuable clarification of items previously considered open to […]
Official guidance and standards are beginning to appear in relation to the CRA. In some of the emerging information, ambiguities are clarified. In others, important changes in emphasis are detectable, meaning that interpretation of the CRA will shift a little.
As well as standards under development, many of […]
This is a difficult question to answer, because while the CRA says (in Annex I Part I (2)):
On the basis of the cybersecurity risk assessment referred to in Article 13(2) and where applicable, products with digital elements shall:
(f) protect the integrity of stored … commands, programs and configuration…
…it doesn’t actually mention secure […]
On December 18th, we held a webinar entitled “The EU Cyber Resilience Act – Training for Embedded Engineers”.
It was a well attended session, and the recording is available here (if you already registered, you should be able to re-use your attendee link).
If you’re new to the topic and have arrived via […]
On October 10th 2024 I was giving a talk on the CRA at the UK Engineering Design Show. I mentioned on a slide that it was possible that the CRA might be adopted by the Council on that day – and I was correct! Next, a few signatures […]
In modern application programming, particularly for “IoT edge” devices, handling the ever-increasing data load is a significant challenge. Whether it’s sensor data from industrial equipment, telemetry from transportation systems, or usage metrics from consumer electronics, the volume and velocity of this information is growing at an exponential rate. This data […]
These are the questions I hear quite often. On one hand, it’s all there in black and white in the CRA, in 3 years’ time compliance will be mandatory. No compliance, no CE mark, and no shipping to the […]
The EU Cyber Resilience Act (CRA) was voted through the EU Parliament in March 2024. All that’s now needed is EU Council assent in the coming weeks, and it becomes EU law.
Here are […]
Just as many customers settle into production with i.MX8, taking advantage of the better price/performance vs i.MX6, NXP’s first i.MX9 processor has come along, in dual-core form – hitting the “sweet spot” of a broad feature set but without too many expensive, power-hungry multimedia bells and whistles. Wherever […]